§01
About this domain.
This directory contains organization-neutral supplier governance, third-party risk, cloud governance, and supply-chain continuity artefacts. It covers the full lifecycle of supplier and partner relationships as well as trade security programme obligations. Its original content is released under CC BY-SA 4.0; a quotation that NOTICE.md allows or keeps under its transition clause keeps its source licence and is not relicensed under CC BY-SA 4.0.
§02
Documents.
19 documents in this domain. Each links to its source on GitHub, where the corpus is version-controlled and continuously gated.
- FrameworkSupplier and Cloud Governance Framework↗
- StandardCloud Exit and Data Portability Standard↗
- StandardSupplier Resilience Monitoring Standard↗
- StandardSupplier Security and Privacy Assurance Standard↗
- ProcedureFourth-Party and Nth-Party Risk Procedure↗
- ProcedureSupplier Audit Procedure↗
- ProcedureSupplier Due Diligence Procedure↗
- ProcedureSupplier Exit and Data Return Procedure↗
- ProcedureSupplier Onboarding Security Review Procedure↗
- ProcedureSupplier Ongoing Monitoring Procedure↗
- ProcedureThird-Party AI Due Diligence Procedure↗
- MatrixSupply Chain Security Programme Alignment Matrix↗
- RegisterConcentration Risk Register↗
- RegisterSoftware Bill of Materials Register↗
- RegisterSubprocessor Register Template↗
- RegisterSupplier Risk Register Template↗
- TemplateSupplier Offboarding Evidence Template↗
- TemplateSupplier Security Questionnaire↗
- AnnexTrade and Supply-Chain Continuity Controls Annex↗