15.1: Establish and Maintain an Inventory of Service Providers

CSF v1.1 References:

CSF v2.0 References:

PF v1.0 References:

Group:

Info icon.

Control is new to this version of the control set.

Control Statement

Establish and maintain an inventory of service providers. The inventory is to list all known service providers, include classification(s), and designate an enterprise contact for each service provider. Review and update the inventory annually, or when significant enterprise changes occur that could impact this Safeguard.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]