Information security in supplier relationships
A.5.19
-
Last updated
Applicable
Catalog reference
Identify and document the information security risks associated with supplier relationships, and put processes in place to manage them.
Narrative — how we satisfy this requirement
Suppliers are kept in the supplier register with a criticality and a review cadence, and the security terms are not yet standard in every contract.