Annex A 5.21 - Managing Information Security in the ICT Supply Chain

Processes and procedures shall be defined and implemented to manage the information security risks associated with the ICT products and services supply chain.

Last updated