PM-30(1): Suppliers of Critical or Mission-essential Items

Control Family:

Program Management

CSF v1.1 References:

CSF v2.0 References:

Baselines:

(Not part of any baseline)

Info icon.

Control is new to this version of the control set.

Control Statement

Identify, prioritize, and assess suppliers of critical or mission-essential technologies, products, and services.

Supplemental Guidance

The identification and prioritization of suppliers of critical or mission-essential technologies, products, and services is paramount to the mission/business success of organizations. The assessment of suppliers is conducted using supplier reviews (see SR-6) and supply chain risk assessment processes (see RA-3(1)). An analysis of supply chain risk can help an organization identify systems or components for which additional supply chain risk mitigations are required.