Back to all 93 controls
Annex A 5.14
Organizational
A.5.14 Information transfer
Information is transferred securely.
What good looks like
Approved channels (encrypted email, SFTP, MFT), transfer agreements with third parties.
Evidence an auditor will ask for
Transfer policy, NDA/DPA, encryption settings, sample transfers.
Put this control into practice
Check whether your organisation already meets Annex A 5.14 with the free Gap Analysis tool, or get implementation-ready templates for every Annex A control with the Document Pack.