← NIST CSF 2.0 in plain English

GV.SC-02

Govern / Cybersecurity Supply Chain Risk Management

Cybersecurity roles and responsibilities for suppliers, customers, and partners are established, communicated, and coordinated internally and externally.

Think of it likeSpelling out in the contract that the roofer tarps the roof and you clear the driveway, so neither side assumes the other did it.

In plain English

The family and each hired helper agree in writing on exactly who is responsible for what, so nothing falls through the cracks.

Related CIS safeguards (unofficial mapping)