If requested, can you make the Information Security Policies and Procedures that are applicable for the service/project available?

Related articles

• If requested, can you make any other documents supporting your responses in this questionnaire available?
• Do you have policies and controls in place to manage IT infrastructure?
• If requested, can you make the most recent Application Code Review or Penetration Testing Reports (carried out by independent third party) available?
• Do you notify your tenants when you make material changes to your information security and/or privacy policies?
• Do you have a written Information Security Policy?