GV.SC-07.102
Has your organization established a business continuity plan that specifically addresses supplier and supply chain interruptions?
Explanation
A business continuity plan for supply chain disruptions helps organizations maintain critical operations during unexpected supplier issues such as vendor bankruptcy, natural disasters affecting suppliers, geopolitical conflicts, or transportation disruptions. This plan should identify critical suppliers, alternative sourcing options, inventory management strategies, and communication protocols for supply chain emergencies. Evidence could include a documented business continuity plan with specific sections addressing supply chain risks, supplier contingency arrangements, emergency contact lists for key vendors, and records of supply chain disruption simulations or tabletop exercises.
Implementation Example
Plan for unexpected supplier and supply chain-related interruptions to ensure business continuity
ID: GV.SC-07.102
Context
- Function
- GV: GOVERN
- Category
- GV.SC: Cybersecurity Supply Chain Risk Management
- Sub-Category
- The risks posed by a supplier, their products and services, and other third parties are understood, recorded, prioritized, assessed, responded to, and monitored over the course of the relationship
