Mechanisms exist to identify and implement compensating countermeasures to reduce risk and exposure to threats.
Control Question
Assessment question for control validation
Does the organization identify and implement compensating countermeasures to reduce risk and exposure to threats?
Supply Chain Risk Management (SCRM) Tiers
Applicable SCRM tier levels for this control
Core Control Designations
Special designations and baseline inclusions
MAD: RSK-06.2
ESP Level 1: RSK-06.2
ESP Level 2: RSK-06.2
ESP Level 3: RSK-06.2
AI Model: RSK-06.2