TPM-13—Vendor Information Security Standard
>Control Description
Theme
Type
Policy/Standard
Vendor Information Security Policy>Implementation Guidance
1. Ensure there is documented vendor information security standard which is available on intranet for employees. 2. Ensure vendor information security standard defines the responsibilities and governance requirements regarding vendor information security engagements. 3. Ensure appropriate agreements are established with vendors who process or store Organization data.
>Testing Procedure
1. Inspect and validate that there is a documented vendor information security standard which is available on intranet for employees. 2. Validate vendor information security standard defines the responsibilities and governance requirements regarding vendor information security engagements. 3. For a sample vendor validate that agreements are established.
>Audit Artifacts
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.