GK Question

technology medium mcq

Which framework provides guidelines for managing third-party cyber risk in supply chains?

  1. NIST SP 800-161
  2. ISO 27036
  3. Both A and B
  4. Neither

Answer: Both A and B

NIST SP 800-161 and ISO 27036 provide frameworks for supply chain risk management: vendor assessment, contract clauses, continuous monitoring. Critical for third-party risk governance questions.

Topic Cybersecurity Frameworks
Exam Relevance Banking, UPSC, SSC