Vendor management program established

Provide the most recent signed service agreement with your cloud provider (e.g., AWS, Azure, GCP).

This test verifies whether vendors requiring security reviews have current and up-to-date reviews according to their risk levels.

To ensure protection of the organization's data and assets that are shared with, accessible to, or managed by suppliers, including external parties or third-party organizations such as service providers, vendors, and customers, and to maintain an agreed level of information security and service delivery in line with supplier agreements.

Develops and maintains a standard of conduct that is acceptable to the company and its employees, customers, and vendors.

This test verifies that you have manually added at least one vendor (other than automatically integrated accounts) on the [Vendors page](/vendors) that is visible to auditors. If you do not have any vendors beyond what Vanta integrates with, you can deactivate this test.

Verifies that all vendors on the [Vendors page](/vendors) have a risk level assigned.

Please provide compliance reports for Certn, and Google workspace.