Direct links from the subject.
| Property | Value |
|---|---|
|
The subject is an instance of a class. |
|
|
The subject is an instance of a class. |
An idea or notion; a unit of thought. |
|
A human-readable name for the subject. |
GV.SC-07.3: The organisation shall audit business-critical third-party service providers for secu- rity compliance. |
|
GV.SC-07.3 |
|
|
http://cyfun.data.gift/data/loc_CyFun2025_Booklet_ESSENTIAL_E_p39 |
|
|
Relates a concept to a concept that is more general in meaning. |
|
|
A general note, for any purpose. |
The goal of this control is to ensure that business-critical third-party service providers are regularly audited to confirm conformance with agreed-upon security requirements, helping to manage risks to operations and critical systems. To achieve this goal: - Identify Critical Providers The criticality of third-party service providers should be assessed based on their impact on operations, including OT systems, and the level of risk they introduce. - Acceptable Audit Evidence Third-party audit results, such as certifications, independent assessments, or security attestations, should be accepted as valid evidence of conformance where appropriate. - Conduct SecurityAudits Regular audits should be performed on critical providers to verify that they meet contractual and policy- based security obligations. |
|
A general note, for any purpose. |
The goal of this control is to ensure that business-critical third-party service providers are regularly audited to confirm conformance with agreed-upon security requirements, helping to manage risks to operations and critical systems. To achieve this goal: - Identify Critical Providers The criticality of third-party service providers should be assessed based on their impact on operations, including OT systems, and the level of risk they introduce. - Acceptable Audit Evidence Third-party audit results, such as certifications, independent assessments, or security attestations, should be accepted as valid evidence of conformance where appropriate. - Conduct SecurityAudits Regular audits should be performed on critical providers to verify that they meet contractual and policy- based security obligations. |
|
A general note, for any purpose. |
The goal of this control is to ensure that business-critical third-party service providers are regularly audited to confirm conformance with agreed-upon security requirements, helping to manage risks to operations and critical systems. To achieve this goal: • Identify Critical Providers The criticality of third-party service providers should be assessed based on their impact on operations, including OT systems, and the level of risk they introduce. • Acceptable Audit Evidence Third-party audit results, such as certifications, independent assessments, or security attestations, should be accepted as valid evidence of conformance where appropriate. • Conduct SecurityAudits Regular audits should be performed on critical providers to verify that they meet contractual and policy- based security obligations. |
|
A general note, for any purpose. |
<div><p>The goal of this control is to ensure that business-critical third-party service providers are regularly audited to confirm conformance with agreed-upon security requirements, helping to manage risks to operations and critical systems. To achieve this goal:</p><ul><li>Identify Critical Providers The criticality of third-party service providers should be assessed based on their impact on operations, including OT systems, and the level of risk they introduce.</li><li>Acceptable Audit Evidence Third-party audit results, such as certifications, independent assessments, or security attestations, should be accepted as valid evidence of conformance where appropriate.</li><li>Conduct SecurityAudits Regular audits should be performed on critical providers to verify that they meet contractual and policy- based security obligations.</li></ul></div> |
|
A notation, also known as classification code, is a string of characters such as "T58.5" or "303.4833" used to uniquely identify a concept within the scope of a given concept scheme. |
GV.SC-07.3 |
|
skos:prefLabel, skos:altLabel and skos:hiddenLabel are pairwise disjoint properties. |
Third-party security compliance audits |
|
A resource has no more than one value of skos:prefLabel per language tag, and no more than one value of skos:prefLabel without language tag. |
The organisation shall audit business-critical third-party service providers for secu- rity compliance. |
|
Relates a resource (for example a concept) to a concept scheme in which it is included. |
|
|
Relates a resource (for example a concept) to a concept scheme in which it is included. |
http://cyfun.data.gift/data/CyFun2025_delta_IMPORTANT_to_ESSENTIAL |
|
Relates a resource (for example a concept) to a concept scheme in which it is included. |
|
|
The number of triples associated with the subject. |
17 |
|
Specifies the dataset the subject is part of. |
Resultaten 1 - 19 of 19
Inverse links to the subject.
| Property | Subject |
|---|---|
|
Relates a concept to a concept that is more specific in meaning. |
Resultaten 1 - 1 of 1