← ISO 27001 Annex A in plain English

A.5.20 A.5

Organizational / A.5.20

Security terms written into supplier agreements

Think of it likePutting it in the contract rather than the conversation.

In plain English

The family writes what it expects of a supplier into the agreement, so the obligation survives a change of staff on either side.

Related CSF and CIS controls (unofficial mapping)