GV.SC-08 - Including Suppliers in Incident Response Planning
GV.SC-08 integrates key suppliers and third parties into the organization’s incident planning, response, and recovery efforts, ensuring coordinated action during cybersecurity events. This includes defining roles, communication protocols, and participation in exercises like simulations to prepare for incidents. Collaboration with suppliers enhances the organization’s ability to manage and recover from disruptions.
This subcategory fosters resilience by aligning supplier and organizational response strategies, reducing delays and miscommunication during crises. It ensures that third parties contribute to lessons learned, improving future preparedness. GV.SC-08 strengthens the collective response to supply chain-related incidents.
