AU-6(9)—Correlation With Information From Nontechnical Sources
>Control Description
In a C-SCRM context, non-technical sources include changes to the enterprise’s security or operational policy, changes to the procurement or contracting processes, and notifications from suppliers, developers, system integrators, external system service providers, and other ICT/OT-related service providers regarding plans to update, enhance, patch, or retire/dispose of a system/component.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.