Operations
The physical and administrative services behind the business: logistics, premises, printing, utilities. Outside most ICT regimes, inside every continuity plan.
Categories in this family
6- Facilities and premises standard
The buildings, their management and the physical security around the people and equipment inside. - Logistics and couriers standard
The movement and storage of goods, including the hardware and media that carry data. - Printing and document services standard
Printing, mailing, scanning, storage and destruction of documents, much of it carrying personal or confidential data. - Training and certification standard
Courses, awareness programmes and certification bodies the business relies on for competence evidence. - Travel, fleet and expenses standard
The services that move and reimburse staff, holding card and identity details along the way. - Utilities and energy important
Electricity, gas and water to the sites, including the data halls.
What reaches this family
| NIS2 | Attaches to every direct supplier and service provider of the entity, whatever it supplies; the depth of the assessment follows the access and the criticality. On every vendor here: NIS2 Art. 21(2)(d). |
|---|---|
| SP 800-161 | Attaches to every supplier, developer, integrator and service provider of a federal system, with the hardest controls on components and on privileged access. On every vendor here: SP 800-161 SR-6, SP 800-161 SR-8, SP 800-161 SA-4, SP 800-161 SR-13, SP 800-161 PS-7. |
| ISO 27001 | Attaches to every supplier relationship through controls 5.19 to 5.23, and to outsourced development through 8.30. With no regime ticked, these rows render as the default. On every vendor here: ISO 27001 5.19, ISO 27001 5.20, ISO 27001 5.22. |
| DORA | Not an ICT service in itself; recorded in the register of information only where a service element sits in the contract. |
Register the vendors in this family
Paste the list; every vendor in this family is placed in its category, given its share of spend and systems and the country it lands in, and carries the obligation rows above. Eight vendors free, no account.
Build my vendor register