Annex 5.1.5

Full text: this article's wording is third-party regulatory text. See the official source for the authoritative provision.

Mapped SPARTA techniques (2)

IA-0001 Compromise Supply ChainST0003
addresses
moderate
derived
Supplier selection criteria from the supply-chain policy gate which suppliers can ever ship code, hardware or services into the entity's environment; weak selection is the precondition for chain compromise.
RD-0001.02 Commercial Ground Station ServicesST0002
addresses
moderate
derived
Selection of suppliers under the supply-chain policy must take supplier security quality into account; this includes shared-tenant GSaaS providers whose multi-customer surface enables cross-tenant access.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.