Vendor management

Software is usually purchased or developed by a third party. That is why your organization’s information security policy does not stop at your own systems and software development. It is important to also test external systems for good practices as defined in your information security policy.

We can help you audit your suppliers, but in fact the information security of suppliers already starts when signing the contract, if you make good agreements about information security, and the possibility to audit.