STA-06: Supply Chain Governance Reviews
Control Family:
Control Statement
Providers shall review the risk management and governance processes of their partners so that practices are consistent and aligned to account for risks inherited from other members of that partner’s cloud supply chain.