NIST Cybersecurity Framework 1.1 ID.BE-1: ID.BE-1: The organization's role in the supply chain is identified and communicated

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Business Environment (ID.BE) – NIST Cybersecurity Framework 1.1

• ID.BE-2 ID.BE-2: The organization's place in critical infrastructure and its industry sector is identified and communicated
• ID.BE-3 ID.BE-3: Priorities for organizational mission, objectives, and activities are established and communicated
• ID.BE-4 ID.BE-4: Dependencies and critical functions for delivery of critical services are established
• ID.BE-5 ID.BE-5: Resilience requirements to support delivery of critical services are established for all operating states (e.g. under duress/attack, during recovery, normal operations)