Framework
Supplier and Cloud Governance Framework
This framework defines an organization-neutral model for supplier, third-party, cloud, managed service, outsourced processing, AI service, and supply-chain governance.
- Type
- Framework
- Version
- 1.0.1
- Date
- 2026-07-02
- Owner
- Supplier Risk Maintainer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Supplier Governance
- Review frequency
- 6 to 12 months and upon material supplier, service, data, contract, or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Scope
- Supplier lifecycle
- Risk classification criteria
- Minimum supplier control domains
- AI supplier requirements
- Cloud governance requirements
- Evidence requirements
- Limitations
Related documents
- Global Regulatory Applicability Registercompliance
- Cross-Framework Alignment Matrixgovernance
- Privacy and Data Governance Policyprivacy
- AI Governance and Risk Frameworkai
- Business Continuity and Resilience Frameworkresilience
- Supplier Security and Privacy Assurance Standardsupply-chain
- Supplier Onboarding Security Review Proceduresupply-chain
- Supplier Ongoing Monitoring Proceduresupply-chain
- Supplier Exit and Data Return Proceduresupply-chain
- Supplier Risk Register Templatesupply-chain
- Subprocessor Register Templatesupply-chain
Next
All Documents