Does your organisation conduct regular assurance activities against suppliers to ensure they are meeting their information security requirements?
Yes, all suppliers are reviewed annually and on demand if there is a breach or other significant disruption