Addressing information security within supplier agreements
A.5.20
-
Last updated
Applicable
Catalog reference
Capture the organisation's information security expectations in contracts with suppliers, scaled to the type of access and relationship involved.
Narrative — how we satisfy this requirement
The standard contract template now carries security and data processing terms, and older agreements are renegotiated as they come up for renewal.