Requirement · ISO-A.5.19
A.5.19 · Information security in supplier relationships
Controls (2)
Control
Name
Domain
VEN-01
Critical third parties are risk-assessed before onboarding and annually
Third-Party Risk
VEN-03
Supplier security incidents are assessed for impact and tracked
Third-Party Risk
Ask Prismet