Information Security in the Supply Chain

Home �鶹��¼� Suppliers Supply chain responsibility Information Security in the Supply Chain

Information Security in the Supply Chain

At �鶹��¼�, security is at the heart of everything we do, and this is reflected in the management of our Supply Chain. An aspect of this is ensuring that all �鶹��¼� suppliers maintain suitable Information Security controls.

Security controls can look very different between suppliers; but as a supplier, having appropriate security controls for your business not only benefits your business (by reducing the risk of an incident, which is not only costly but also damaging to a company’s reputation), but is also a responsibility of being a �鶹��¼� supplier.

Supplier Incident phone number:

(+44) 20 8963 7030

Sometimes, despite best efforts from all those involved, breaches and incidents still occur. If you experience an incident, it is important to notify �鶹��¼� of this as soon as possible, and within 72 hours, unless contractually agreed otherwise. This should be done by calling in on the dedicated Supplier Incident phone number.

You will be asked questions by the team at �鶹��¼� (such as name and contact details, contract(s) working on and details of the incident) to allow them to take appropriate steps internally to secure �鶹��¼� data.

This information allows �鶹��¼� to take any necessary steps to protect �鶹��¼� and �鶹��¼� Customer data. Where feasible, it is also possible that you will also be offered assistance with recovering from the incident.

After an incident

It is likely that you will be asked to participate in an audit conducted by a member of �鶹��¼� staff following an incident. This helps us to ensure that you have implemented sufficient Security Controls to mitigate the risk of any future incidents occurring, and that �鶹��¼� assets are duly protected.

Wherever possible, �鶹��¼� aim to keep suppliers onboarded after they have experienced an incident; however, there may be cases where a breach is considered too high a risk and continuation of the contract must be considered. You will be notified of any decisions surrounding this as soon as possible.

Additional resources

If you would like to learn more about strengthening your security posture, please check out the below links:

�鶹���¼�