---

id: "ID.SC-05" title: "Supply Chain Risk Management" function: "ID" function_name: "Identify" category: "ID.SC" category_name: "Supply Chain Risk Management" description: "Cybersecurity supply chain risk management is coordinated with enterprise risk management." controls: - PM-8 - PM-9 - SA-1 - SR-1 - SR-2 - SR-3

---

ID.SC-05: Supply Chain Risk Management

Description

Cybersecurity supply chain risk management is coordinated with enterprise risk management.

Category Context

Function: ID — Identify Category: ID.SC — Supply Chain Risk Management

Supply chain risk management processes are established to identify, assess, and respond to risks.

Mapped SP 800-53 Controls

• PM-8 (Program Management) — View Control
• PM-9 (Program Management) — View Control
• SA-1 (System and Services Acquisition) — View Control
• SR-1 (Supply Chain Risk Management) — View Control
• SR-2 (Supply Chain Risk Management) — View Control
• SR-3 (Supply Chain Risk Management) — View Control