tpm-033-processestoaddressweaknessesordeficiencies.md

SCF - TPM-03.3 - Processes To Address Weaknesses or Deficiencies

Mechanisms exist to address identified weaknesses or deficiencies in the security of the supply chain

Mapped framework controls

ISO 27002

• A.5.19
• A.5.22

NIST 800-53

• SR-3

SOC 2

• CC9.1

Control questions

Does the organization address identified weaknesses or deficiencies in the security of the supply chain