top of page

Principle 6

RISK-BASED STRATEGY AND EXECUTION

Include Third Parties in Risk Treatment Plan

< Back To Framework

The cyber risk treatment plan should take into account third parties including partners, suppliers, and supply chain participants.

2023 Draft NIST CSF 2.0 GV.SC , ID.IM-02

SEC Regulation S–K Item 106(b)—Risk Management and Strategy

bottom of page