Quillnet
Standards
CRA - Manufacturer
IEC-62443-2-1
IEC-62443-4-1
6.2.6: Supply Chain Security
Mandatory
Requirement:
The asset owner shall have policies and procedures that specify requirements for suppliers of products and services addressing cybersecurity risks to the IACS. The asset owner policies and procedures shall consider recursive requirements on the suppliers, where feasible.
Guidance: