|
control enhancementSA-9(3)
Establish and Maintain Trust Relationship with Providers (SA-9(3))
Establish, document, and maintain trust relationships with external service providers based on the following requirements, properties, factors, or conditions: [organization-defined].
acquisitionsdlcservicessupply-chainenhancement
Why These Connect
Maps To1
These are equivalent or closely aligned requirements in other frameworks.
Enhances1
These enhancements add specific capabilities or refinements to the base control.
Cross-Framework Mappings(1)
ISO 27001ISO/IEC 27001:20221 mappingFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022
Organization-Defined Parameters(2)
Assignmentorganization-defined security requirements, properties, factors, or conditions
Assignmentorganization-defined privacy requirements, properties, factors, or conditions