ComplianceNIST 800-53 enhancement

NIST-PM-30(1) Suppliers of Critical or Mission-essential Items

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
PM Program Management
Control
PM-30(1)

Control statement

Identify, prioritize, and assess suppliers of critical or mission-essential technologies, products, and services.

Discussion

The identification and prioritization of suppliers of critical or mission-essential technologies, products, and services is paramount to the mission/business success of organizations. The assessment of suppliers is conducted using supplier reviews (see [SR-6](#sr-6) ) and supply chain risk assessment processes (see [RA-3(1)](#ra-3.1) ). An analysis of supply chain risk can help an organization identify systems or components for which additional supply chain risk mitigations are required.

Related

Enhancement of · Compliance (1)

  • NIST-PM-30 Supply Chain Risk Management Strategy NIST 800-53 control

Related control · Compliance (2)

  • NIST-RA-3 Risk Assessment NIST 800-53 control
  • NIST-SR-6 Supplier Assessments and Reviews NIST 800-53 control