Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleDoes your organisation conduct a business impact assessment for each supplier and give them a corresponding criticality rating?

Does your organisation conduct a business impact assessment for each supplier and give them a corresponding criticality rating?

Yes.

More information: https://commonplace.atlassian.net/l/cp/bAZjm30T

Expand
titleDoes your organisation have a supplier security policy that outlines the security requirements that your suppliers are expected to meet?

Does your organisation have a supplier security policy that outlines the security requirements that your suppliers are expected to meet?

Yes. We have a documented Supplier Security Policy that details the requirements that must be in place when selecting service providers. This includes checklists for security clauses in contracts, and due diligence checklists to ensure appropriate controls. Suppliers are also reviewed at least annually to ensure performance.

...