SFS D / SF 4

Back to SFS D

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Has the organization documented evidence confirming supplier security agreements were reviewed for compliance throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented review records showing security requirements were validated against current agreements

Assessment criterion and evidence

Actor: Organization procurement and security management. Scope: Third-party supplier contracts within organizational boundaries. Evidence period: The defined review period. Required evidence: Signed supplier security agreements specifying organizational requirements; Records of periodic compliance reviews with dated verification. Negative criterion: No evidence of required review or confirmation of compliance status. Missing evidence: Pending until documented review evidence is provided

View the JSON record (opens in a new tab).

Assessment result: unset.