15.6: Monitor Service Providers
CSF v1.1 References:
Group:
Control is new to this version of the control set.
Control Statement
Monitor service providers consistent with the enterprise’s service provider management policy. Monitoring may include periodic reassessment of service provider compliance, monitoring service provider release notes, and dark web monitoring.
[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]