Study. uk . com
  1. Home
  2. All questions
  3. Question 844

CISM study material · question 844 of 1000

Which CSF 2.0 supply chain outcome addresses the involvement of suppliers in incident work?

  1. Suppliers are known and prioritised by criticality
  2. Supply chain requirements are integrated into contracts
  3. Due diligence is performed before entering supplier relationships
  4. Relevant suppliers and third parties are included in incident planning, response and recovery activities
Show the answer

Answer: D. Relevant suppliers and third parties are included in incident planning, response and recovery activities

CSF 2.0's GV.SC-08 brings suppliers and other third parties into incident planning, response and recovery, so an incident is not the first contact.

Source: NIST CSWP 29 (NIST) — Appendix A GV.SC-08

Challenge yourself on this topic → Study as cards