Description Direct suppliers and service providers supporting this application are risk-assessed for cybersecurity practices prior to onboarding. Context Weight 1 Control area Supply chain security MOSCOW Must Control Framework NIS2