# GV.SC-07 — The risks posed by a supplier, their products and services, and other third parties are understood, recorded, prioritized, assessed, responded to, and monitored over the course of the relationship

- **Subcategory ID:** GV.SC-07
- **CSF function:** [GV](/md/csf/GV.md) — Govern

## Mapped controls

- [RA-9](/md/controls/RA-9.md)
- [SA-4](/md/controls/SA-4.md)
- [SA-9](/md/controls/SA-9.md)
- [SR-3](/md/controls/SR-3.md)
- [SR-6](/md/controls/SR-6.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.