PL-08(02) Supplier Diversity

Require that pl-08.02_odp.01 allocated to pl-08.02_odp.02 are obtained from different suppliers.

Parameter ID Definition
pl-08.02_odp.01 controls
pl-08.02_odp.02 locations and architectural layers



Information technology products have different strengths and weaknesses. Providing a broad spectrum of products complements the individual offerings. For example, vendors offering malicious code protection typically update their products at different times, often developing solutions for known viruses, Trojans, or worms based on their priorities and development schedules. By deploying different products at different locations, there is an increased likelihood that at least one of the products will detect the malicious code. With respect to privacy, vendors may offer products that track personally identifiable information in systems. Products may use different tracking methods. Using multiple products may result in more assurance that personally identifiable information is inventoried.

Related controls 2