Has your organization established and maintained a comprehensive inventory of all external dependencies and their relationships to critical assets and business functions?

This inventory should document all third-party services, utilities, cloud providers, and other external resources your organization relies on to operate. It should map how these dependencies connect to your critical assets (like data, systems, and infrastructure) and business functions (like operations, finance, or customer service). An acceptable deliverable would be a structured document or database that lists all external dependencies with details including: the dependency name, service provided, criticality level, associated internal assets/systems, related business functions, contract information, and contingency plans in case of service disruption. This could be maintained in a spreadsheet, CMDB (Configuration Management Database), or GRC (Governance, Risk, and Compliance) platform.