← CIS Controls v8 in plain English

15.5 IG3

Control 15 / Service Provider Management

Assess Service Providers

Think of it likeChecking references and reviews before hiring someone to work on your house.

In plain English

The family regularly assesses their service providers to ensure they meet the necessary standards, just as they would check references and reviews before hiring someone to work on their home.

Related CSF subcategories (unofficial mapping)

GV.SC-06: Planning and due diligence are performed to reduce risks before entering into formal supplier or other third-party relationships.GV.SC-07: The risks posed by a supplier, their products and services, and other third parties are understood, recorded, prioritized, assessed, responded to, and monitored over the course of the relationship.ID.RA-10: Critical suppliers are assessed prior to acquisition.