Standard
Supplier Resilience Monitoring Standard
This standard defines the resilience signals monitored for critical suppliers, the thresholds that trigger action, the cadence of monitoring, and the escalation path. It complements ongoing supplier monitoring (which focuses on contractual and security compliance) with a specific lens on whether the supplier remains capable of delivering its service.
- Type
- Standard
- Version
- 1.0.12
- Date
- 2026-10-27
- Owner
- Supplier Risk Maintainer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Supply Chain Governance
- Review frequency
- Annual and upon material change to the supplier portfolio, signals catalogue, or regulator-expected monitoring posture
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Scope
- 3. Resilience signal taxonomy
- 4. Monitoring posture by supplier tier
- 5. Operating expectations
- 6. Coordination with adjacent standards
- 7. Metrics
- 8. Framework alignment
- 9. Limitations
Frameworks it maps to
- DORA
- EBA Guidelines on outsourcing arrangements
- NIST SP 800-161 Rev. 1
- ISO 28000:2022
- ISO/IEC 27036-2:2022
- FSB Cyber Lexicon and Third-Party Risk Toolkit
- NIST CSF 2.0
- CSA STAR
Related documents
- Supplier and Cloud Governance Frameworksupply-chain
- Supplier Security and Privacy Assurance Standardsupply-chain
- Supplier Ongoing Monitoring Proceduresupply-chain
- Concentration Risk Registersupply-chain
- Fourth-Party and Nth-Party Risk Proceduresupply-chain
- Third-Party and Supply Chain Risk Standardrisk
- Business Continuity and Resilience Frameworkresilience
- DORA Implementation Annexcompliance
Next
All Documents