ISO/IEC 27001:2022/Organizational controls/49 of 123
A.5.19Information security in supplier relationships
Control family: Organizational controls
Control description
Processes and procedures shall be defined and implemented to manage the information security risks associated with the use of supplier’s products or services.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.