GV.SC-09_gvsc-09
Supply chain security practices are integrated into cybersecurity and enterprise risk management programs, and their performance is monitored througho
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Supply chain security practices are integrated into cybersecurity and enterprise risk management programs, and their performance is monitored througho
Cybersecurity supply chain risk management plans include provisions for activities that occur after the conclusion of a partnership or service agreeme
Develop, document, and disseminate to [organization-defined]: [organization-defined] identification and authentication policy that: Procedures to faci
Require individuals accessing the system to employ [organization-defined] under specific [organization-defined].
Require users to re-authenticate when [organization-defined].
Require that the registration process to receive an account for logical access includes supervisor or sponsor authorization.
Require evidence of individual identification be presented to the registration authority.
Require that the presented identity evidence be validated and verified through [organization-defined].
Require that the validation and verification of identity evidence be conducted in person before a designated registration authority.
Require that a [organization-defined] be delivered through an out-of-band channel to verify the users address (physical or digital) of record.