Law / Frameworks / NIST CSF 2.0 / Govern
NIST CSF 2.0, GovernGV.SC-08
Relevant suppliers and other third parties are included in incident planning, response, and recovery activitiesNIST Cybersecurity Framework, version 2.0, February 2024 (NIST CSWP 29), GV.SC-08
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 1
- law
- 1
- jurisdiction
- 0
- with court rulings behind them
- 0
- not yet in force
Sector security regimes
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Canada |
OSFI Guideline B-10, Third-Party Risk Management |
Include in the agreement with the third party the ability to deliver operations through disruption, including maintenance, testing and activation of business continuity and disaster recovery plans, and keep contingency plans for critical third-party arrangements. |
Full text of the NIST Cybersecurity Framework, public domain (a US government work). Every control of the framework.