Do third-party agreements include provision for the security and protection of information and assets?

Related articles

• Which subcontractors do you work with?
• Does your organisation have offices, servers,… outside the EU?
• Do you conduct application penetration tests of your cloud infrastructure regularly?
• Are data recovery processes in place?
• Do you have appointed person(s) responsible for Information Security, with defined roles and responsibilities?