What to Provide
Provide a confidentiality agreement for a sample of critical vendors
The evidence should demonstrate:
An agreement is in place or a template has been developed
Defined commitments for both parties, including non-disclosure and minimum security requirements
NOTE: The audit team will communicate sample selections once they have been finalized. Please refrain from attaching evidence in this ER until samples have been communicated.
Evidence Format
Exported word processing documents in a common file type such as .docx or .pdf., screenshots, or exported images in a common image file type such as .jpg, .png, or .pdf.
Associated Unified Control ID | Associated Framework Control |
CTRL-1129 | LCL-14 |