A.5.22 — Monitor, review and change management of supplier services
This control ensures supplier services are monitored, reviewed, and adjusted to maintain information security. Measures include service level agreements, periodic reviews, and contract updates.
| Property | Value |
|---|---|
| Section | process |
| Owner | operator |
Mapped Controls
| Control | Title |
|---|---|
| SID-ORG-04 | Supplier and Third-Party Security |
Source: ISO/IEC 27001:2022 Annex A