Third-Party & Supplier Coordination
Operational controls for third-party & supplier coordination.
Domain purpose
Operational controls for third-party & supplier coordination.
Controls and requirements
D17-CTL-01Supplier incident coordination
Establish a repeatable and accountable capability for supplier incident coordination during AI security incident handling.
D17-CTL-02Contractual notification
Establish a repeatable and accountable capability for contractual notification during AI security incident handling.
D17-CTL-03Shared evidence handling
Establish a repeatable and accountable capability for shared evidence handling during AI security incident handling.
D17-CTL-04Supplier remediation validation
Establish a repeatable and accountable capability for supplier remediation validation during AI security incident handling.
Implementation use
Determine applicability using the framework scope and system context. Implementation should be proportionate to risk and supported by evidence sufficient to validate the intended outcome.