Back to all 93 controls
Annex A 5.19
Organizational
A.5.19 Information security in supplier relationships
Security is considered in supplier relationships.
What good looks like
Supplier inventory with criticality, security due diligence before onboarding.
Evidence an auditor will ask for
Supplier register, due-diligence questionnaires, risk ratings.
Document template for this control
The Supplier Relationship Security Policy template gives you auditor-ready wording that fulfils Annex A 5.19. Preview the full document before you download the editable version.