AO
← Controls

CC9.2

Vendor Risk Management

SOC 2 · Security

Needs Attention
AI

AI explanation

Four subprocessors have no security review recorded in the last 12 months.

Remediation

  1. 1Collect current security documentation
  2. 2Record review outcomes in the vendor register
  3. 3Re-run automated test

Evidence

  • Vendor register
  • Signed data processing agreements
Open evidence library →

Affected systems

Google Workspace