Supplier & Third-Party Security
Your suppliers hold your data and run your services, but they have many masters. We make sure your exposure to them stays within appetite.
We establish and uplift supplier assessment functions, strengthen the information security clauses in supplier contracts, and give you independent, regular assessment of your actual third-party exposure.
When you change providers, we define the security requirements for the new service, write the security clauses for the contract, and advise the migration team through the transition — as we have for member administration services migrations.
What we deliver
- Supplier assessment function — establish or uplift
- Information security clauses in supplier contracts
- Security requirements for new service providers
- Security advice to supplier migration projects
- Independent assessment of third-party risk exposure
Related services
You might also need
APRA CPS 234 Enablement
Gap assessment, governance and controls testing for financial services and superannuation.
Learn moreISO/IEC 27001 Certification & Uplift
From first gap to certification, aligned to ISO/IEC 27001:2022, with an ISMS your team can run.
Learn moreSecurity Governance, Policy & ISMS
Policy, standards, processes and procedures, an ISMS and a governance function that runs it — plus data governance foundations.
Learn moreLet’s make security simple.
Tell us where you are and where you need to be. We’ll come back with a clear, practical view of what it takes to get there.