Lines of Communication
Suppliers, components, and the routes they reach the estate on
Suppliers, integrators and managed-service providers with a path into the estate shall be registered on the terrain overlay, with the access each holds and the elements it reaches recorded.
PurposeTo make third parties positional, so that supplier risk is assessed against what a supplier can reach rather than against what they were contracted to do.Activities10 · Metrics2Software and hardware components deployed into the estate shall resolve to a verified origin, and the organization shall maintain a current inventory of what those components contain.
PurposeTo know where deployed components came from and what is inside them, so that a compromise disclosed anywhere can be located here.Activities10 · Metrics2Supplier access shall be brokered through the organization's own identity plane and constrained to the elements the engagement requires, with no standing access to a decisive point.
PurposeTo keep supplier access scoped, observable, and revocable by the agency rather than by the supplier.Activities10 · Metrics2Supplier-provided updates shall be integrity-verified before deployment and shall pass through a staging ring for a stated period before reaching the whole estate.
PurposeTo limit the blast radius of a compromised trusted update, so that supply chain compromise reaches a ring rather than the estate.Activities10 · Metrics2The organization shall be able to sever a supplier's access within a stated period and continue the mission, and shall have demonstrated it.
PurposeTo retain the option of cutting a line of communication, so that a compromised or failed supplier is a decision rather than a dependency.Activities10 · Metrics3