ctl-011
Critical vendor SLAs are monitored via quarterly scorecards.
- Type
- DETECTIVE
- Automation
- SEMI_AUTOMATED
- Frequency
- QUARTERLY
- Owner
- Procurement & TPRM
Control Design Assessment (CDA)
Procedures evaluating whether the control is designed adequately.
No design-assessment procedures defined yet.
Control Operating Effectiveness (COE)
Procedures evaluating whether the control operated over the testing period.
No operating-effectiveness procedures defined yet.
Linked risks
- Critical vendor failuremitigation 2
- Incomplete vendor due diligencemitigation 1
- Vendor concentration riskmitigation 2
Framework mappings & latest test
STA-13STA-14
Latest test:PASS2026-04-05