Does your organization require suppliers to implement employee vetting procedures and insider threat controls in contractual agreements?

This question assesses whether your organization formally requires suppliers to screen their employees and implement safeguards against malicious insider activities through contractual obligations. Supplier employees often have access to your sensitive data or systems, and inadequate vetting by suppliers creates security vulnerabilities that could impact your organization. Evidence of compliance could include sample contract language with security requirements, supplier security addendums that specifically address employee vetting and insider threat controls, or a supplier security policy that mandates these requirements in all supplier agreements.