Checks / Obligations / Control your suppliers
Obligation · 8 controls · 8 laws
Control your suppliers
Suppliers and processors must be under contract, assessed and monitored.
What to put in place
Keep a register of suppliers, put the right contract terms in place and review them yearly.
Policy wording you can use
[your organisation] keeps a register of the suppliers and processors behind its services, puts written contracts with the required terms in place, and reviews each supplier's controls at least once a year.
Prove it once
Describe or link the evidence that this is in place: the policy, the page, the document reference. It is sealed once and applied to all 8 controls here that take a yes or a document (the rest need their own number or date and are listed after).