Back to all 93 controls
Annex A 5.22
Organizational
A.5.22 Monitoring, review and change management of supplier services
Suppliers are monitored over time.
What good looks like
Scheduled supplier reviews, monitoring of SLAs, security incidents and changes.
Evidence an auditor will ask for
Review meeting notes, SLA reports, change notifications.
Document template for this control
The Supplier Relationship Security Policy template gives you auditor-ready wording that fulfils Annex A 5.22. Preview the full document before you download the editable version.