A.5.21

Managing information security in the ICT supply chain

organizational control

What it means

Extend security requirements down the ICT supply chain, not just to direct suppliers.

Get A.5.21 into your SoA automatically

StandardOS pre-fills this control's applicability and justification from a seven-question profile, then tracks its implementation.