← NIST CSF 2.0 in plain English

GV.SC-04

Govern / Cybersecurity Supply Chain Risk Management

Suppliers are known and prioritized by criticality.

Think of it likeRanking the people who work on your home by how badly you would miss them: when a pipe bursts the plumber matters far more than the gardener, so you know who to protect and call first.

In plain English

The family sorts its service providers by how critical each one is, so if something fails they already know which relationships to safeguard and which to lean on first, rather than treating every helper as equally important.

Related CIS safeguards (unofficial mapping)