Does your organization conduct formal lessons learned sessions with critical suppliers following significant projects, incidents, or on a regular cadence?

Collaborative lessons learned sessions with critical suppliers help identify areas for improvement in security practices, communication protocols, and incident response procedures. These sessions can uncover vulnerabilities in the supply chain, establish better coordination mechanisms, and strengthen relationships with key suppliers who may have access to sensitive systems or data.

Evidence of fulfillment could include meeting minutes or reports from lessons learned sessions, documented action items resulting from these sessions, a formal process document outlining how and when these sessions are conducted, or a schedule of planned and completed supplier review meetings that include lessons learned components.