One or more of the standards require the organization to:
A) Evaluate the resiliency of its suppliers
B) Evaluate the resiliency of its critical suppliers
C) Evaluate the ability of suppliers to respond within the RTO of the functions they support
D) All of the above

Question

Quizplus · Accepted Answer

All of the options are required by one or more standards. For example, ISO 22301 requires organizations to evaluate the resiliency of their critical suppliers and ensure that they are able to respond within the RTO (Recovery Time Objective) of the functions they support. Similarly, NIST SP 800-53 requires organizations to evaluate the resilience of their suppliers, especially those that provide critical services or support critical functions. Therefore, the best choice is D.

One or More of the Standards Require the Organization To