tpm-043-conflictofinterests.md

SCF - TPM-04.3 - Conflict of Interests

Mechanisms exist to ensure that the interests of external service providers are consistent with and reflect organizational interests.

Mapped framework controls

ISO 27002

• A.5.19

SOC 2

• CC3.3

Control questions

Does the organization ensure that the interests of external service providers are consistent with and reflect organizational interests?