Does your organization adhere to contractually defined rules and protocols for incident information sharing with suppliers?

This question assesses whether your organization follows the specific incident reporting and information sharing requirements established in supplier contracts. These requirements typically include timeframes for notification, types of incidents that must be reported, communication channels, and the level of detail required when sharing incident information. Evidence could include documented incident response procedures that reference supplier contracts, communication logs showing adherence to contractual notification requirements during actual incidents, or contract excerpts highlighting the incident information sharing protocols that your organization follows.