Why You Need a Security Addendum: Managing vendor expectations

Author(s): Frank Sewell

There are many reasons to add security protections to your agreements. Establishing the expectations that the vendor will secure your data and infrastructure with a well-defined Security Program is an excellent way to start. Keep in mind, it is not enough for the vendor to simply state that they will cover security. Hold them accountable to the expected standards you identify with a Security Addendum in their main agreement. Feel free to use the sample Security Addendum to start covering this need in your agreements.

Tags

Vendor Management, Risk Impact, CIO, Risk Management, Risk Assessment, Third Party Risk Management, nParty Risk Management, Vendor Risk, regulatory, compliance, Security, Financial risk, Operational Risk, Security Risk, Strategic Risk, Regulatory Risk, Compliance Risk, Security Addendum, Security Program

Related Content: Vendor Management

Thought model representing Design and Build an Effective Contract Lifecycle Management Process

Design and Build an Effective Contract Lifecycle Management Process

Thought model representing Jump Start Your Vendor Management Initiative

Jump Start Your Vendor Management Initiative

Thought model representing Build an IT Risk Taxonomy

Build an IT Risk Taxonomy

Thought model representing The Limitation of Liability Clause – Take a Granular Approach to Identify and Manage Vendor Risk Better

The Limitation of Liability Clause – Take a Granular Approach to Identify and Manage Vendor Risk Better

Thought model representing Contract Term & Termination – It’s more than the start and end date of any agreement

Contract Term & Termination – It’s more than the start and end date of any agreement

Thought model representing The Assignment Clause: Why It Matters

The Assignment Clause: Why It Matters

Thought model representing Looking at Risk in a New Light: The Six Pillars of Vendor Risk Management

Looking at Risk in a New Light: The Six Pillars of Vendor Risk Management

Thought model representing Satisfy Customer Requirements for Information Security

Satisfy Customer Requirements for Information Security

© Info-Tech Research Group | Terms of Use | Privacy Policy