CISA Cyber Resilience Review (CRR) v4.0
External Dependencies Management – CISA Cyber Resilience Review (CRR) v4.0

CISA Cyber Resilience Review (CRR) v4.0 EDM.3: Relationships with external entities are formally established and maintained

What does EDM.3 require?

Resilience requirements of the critical service specific to each external dependency are established, reviewed and updated, an external entity's ability to meet them is considered in selection, and the requirements are included in formal agreements.

Maintained by Gerard Blokdyk

Other controls in External Dependencies Management – CISA Cyber Resilience Review (CRR) v4.0

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.