OSCAL source · SSAQ
{
"artifactId": "SSAQ",
"iso": [
"A.5.19",
"A.5.20",
"A.5.21",
"A.5.22"
],
"catalog": [
{
"iso": "A.5.19",
"oscalId": "iso27001-a.5.19",
"title": "Information security in supplier relationships",
"className": "iso27001-annex-a",
"group": "Organizational controls (Annex A.5)"
},
{
"iso": "A.5.20",
"oscalId": "iso27001-a.5.20",
"title": "Addressing information security within supplier agreements",
"className": "iso27001-annex-a",
"group": "Organizational controls (Annex A.5)"
},
{
"iso": "A.5.21",
"oscalId": "iso27001-a.5.21",
"title": "Managing information security in the ICT supply chain",
"className": "iso27001-annex-a",
"group": "Organizational controls (Annex A.5)"
},
{
"iso": "A.5.22",
"oscalId": "iso27001-a.5.22",
"title": "Monitoring, review and change management of supplier services",
"className": "iso27001-annex-a",
"group": "Organizational controls (Annex A.5)"
}
],
"profileAlters": [
{
"control-id": "iso27001-a.5.19",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "Required for cloud and SaaS supplier dependencies."
},
{
"name": "implementation-status",
"value": "In progress"
}
]
}
]
},
{
"control-id": "iso27001-a.5.20",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "Required for supplier security terms."
},
{
"name": "implementation-status",
"value": "In progress"
}
]
}
]
},
{
"control-id": "iso27001-a.5.21",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "Required for SaaS, repository, identity and hosting chain."
},
{
"name": "implementation-status",
"value": "Planned"
}
]
}
]
},
{
"control-id": "iso27001-a.5.22",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "Required for supplier performance and changes."
},
{
"name": "implementation-status",
"value": "In progress"
}
]
}
]
}
],
"components": [],
"sspImplementedRequirements": []
}
Close
