Vendor Security

Answer vendor security questionnaires with a scoped claim, control owner, evidence period and known exceptions. Use the claim register to distinguish current controls from plans and review what can be shared or promised.