tpm-11-third-partyincidentresponse&recoverycapabilities.md

SCF - TPM-11 - Third-Party Incident Response & Recovery Capabilities

Mechanisms exist to ensure response/recovery planning and testing are conducted with critical suppliers/providers.

Mapped framework controls

ISO 27002

• A.5.19

SOC 2

• CC7.3
• P6.5
• P6.6

Control questions

Does the organization ensure response/recovery planning and testing are conducted with critical suppliers/providers?