graphgrc

SCF - TPM-05 - Third-Party Contract Requirements

Mechanisms exist to identify, regularly review and document third-party confidentiality, Non-Disclosure Agreements (NDAs) and other contracts that reflect the organization’s needs to protect systems and data.

Mapped framework controls

GDPR

ISO 27002

SOC 2

Control questions

Does the organization identify, regularly review and document third-party confidentiality, Non-Disclosure Agreements (NDAs) and other contracts that reflect the organization’s needs to protect systems and data?