Enterprise Security Assessment > Risk and Security Management > Risk Assessment and Treatment

Does remediation reporting include a process to identify and log subcontractor information security, privacy and/or data breach issues?

book reader icon
1 Minute
12/05/2024
facebook logo gray
linkedin logo gray
mail logo gray

Yes. Any subcontractor contracted by QR Planet needs to have clearly defined privacy policies and must follow established communication guidelines for information security, privacy or data breach issue. This is included within the signed DPO concluded between QR Planet and respective subcontractors.

Last update 1 week ago

Do your subcontractors have access to Scoped Systems and Data or to facilities processing the same?

Yes. If necessary, subcontractors have access to our scoped systems and data. We have DPA contracts with our subcontractors, ensuring full compliance.

Do you have a documented program for managing third-party risks in place?

No. As a small LLC, all of QR Planet's operational partners are known to management and are being carefully assessed and monitored. No formalization necessary.

Do you have contracts for all subcontractors requiring assessment?

Yes. QR Planet assesses all its service providers, dependent service providers, sub-processors or subcontractors prior to engagement and has contracts in effect.

Which clauses do your contracts with subcontractors include?

All contracts between QR Planet and any subcontractor are up to legal standards and include the commonly used clauses as shown in this table.

Do you have an assigned individual responsible for relevant issues in regards to third-party risk management?

Yes. As a small LLC, all of QR Planet's operational partners are constantly monitored by management directly in regards to all relevant issues.