Does your organization have documented procedures for managing data leakage risks when terminating supplier relationships?

When supplier relationships end, there's a risk that sensitive data may be retained by the supplier or improperly handled during the transition. This question assesses whether your organization has formal processes to ensure data is either returned, securely destroyed, or properly transferred when a supplier relationship ends. These procedures should include data identification, access revocation, contractual obligations enforcement, and verification of data removal. Evidence could include a supplier offboarding policy document, termination clauses from supplier contracts addressing data handling, checklists used during supplier termination, or documentation of completed supplier termination processes showing data protection measures.