2 / 2

Assesses and Manages Risks from Vendors and Business Partners

CC9 — Risk Mitigation · Not yet reviewed

Status

○ NOT STARTED ◑ IN PROGRESS ✓ IMPLEMENTED — NOT APPLICABLE

What this control requires

The entity assesses and manages risks associated with vendors and business partners. Vendor management program includes risk assessments, contracts with security requirements, and monitoring of vendor performance.

Details

Risk Level

— LOW MEDIUM HIGH

Control Owner

Next Review Date

Notes — what's been done, what's missing, any gaps