CC9.2 CC9
Risk Mitigation / CC9.2
Managing the risk that comes with vendors and partners
In plain English
Vendors and business partners are assessed before engagement and monitored during it, with security commitments written into agreements and their performance against those commitments reviewed.