9 docs tagged with "fornecedores"

Technical and process indicators specific to the domain of organisational security governance (GOV), with thresholds by risk level and mapping to the cross-cutting governance dimensions of SbD-ToE.

Structures, policies and practices to ensure organisational governance, supplier integration and transparency in the SbD-ToE cycle

Formal policies that sustain the governance, exception and supplier management practices described in this chapter

What SbD-ToE requires to exist on the Procurement side

Organisational policy that defines the security requirements applicable to the contractual lifecycle with suppliers and contractors, including pre-contractual due diligence, minimum contractual clauses by risk level, technical onboarding, compliance monitoring, periodic reassessment and secure offboarding, proportional to the criticality level (L1, L2, L3).

Security contractual clauses in contracts with suppliers, contractors and technical third parties

Process for security validation of suppliers, contractors and technical third parties

Responsibilities of Suppliers and Third Parties in the SbD-ToE

Technical plan of the minimum mandatory upskilling for suppliers, contractors and partners with technical access.