15.2—Establish and Maintain a Service Provider Management Policy
IG2
IG3
Documentation
Govern
>Control Description
Establish and maintain a service provider management policy. Ensure the policy addresses the classification, inventory, assessment, monitoring, and decommissioning of service providers. Review and update the policy annually, or when significant enterprise changes occur that could impact this Safeguard.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.