graphgrc

SCF - TPM-03.3 - Processes To Address Weaknesses or Deficiencies

Mechanisms exist to address identified weaknesses or deficiencies in the security of the supply chain

Mapped framework controls

ISO 27002

NIST 800-53

SOC 2

Control questions

Does the organization address identified weaknesses or deficiencies in the security of the supply chain