supplier

{
  "id": "MLC-T-CYB-004132",
  "term": "supplier",
  "field": "Cybersecurity",
  "definition": "1. Organization or individual that enters into an agreement with the acquirer or integrator for the supply of a product or service. This includes all suppliers in the supply chain, developers or manufacturers of systems, system components, or system services; systems integrators; suppliers; product resellers; and third-party partners.\n\n2. Organization or individual that enters into an agreement with the acquirer or integrator for the supply of a product or service. This includes all suppliers in the supply chain.\nIncludes (i) developers or manufacturers of information systems, system components, or information system services; (ii) vendors; and (iii) product resellers.\n\n3. Organization or individual that enters into an agreement with the acquirer or integrator for the supply of a product or service. This includes all suppliers in the supply chain, developers or manufacturers of systems, system components, or system services; systems integrators; vendors; product resellers; and third party partners.\n\n4. Organization or individual that enters into an agreement with the acquirer or integrator for the supply of a product or service. This includes all suppliers in the supply chain.\n\n5. Product and service providers used for an organization’s internal purposes (e.g., IT infrastructure) or integrated into the products of services provided to that organization’s Buyers.\n\n6. Organization or an individual that enters into an agreement with the acquirer for the supply of a product or service.",
  "references": [
    "NIST SP 800-161r1-upd1 [11/1/2024 errata update] from ISO/IEC/IEEE 15288:2015 (adapted), NIST SP 800-53 Rev. 5 (adapted from definition of \"developer\")",
    "NIST SP 800-161 [Superseded] from ISO/IEC 15288 (Adapted), NIST SP 800-53 Rev. 4 (adapted from “developer”)",
    "NIST SP 800-53 Rev. 5",
    "NISTIR 7622 from ISO/IEC 15288 (Adapted)",
    "NIST Cybersecurity Framework Version 1.1",
    "NIST SP 800-160 Vol. 1 from ISO/IEC/IEEE 15288; NIST SP 800-160v1r1 from ISO/IEC/IEEE 15288:2015",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/supplier/"
}