DeftTrust

← Controls

LEG-01:VM-07

Vendor security incidents reported and handled per IS-07

Status
Event-driven
Policy cadence
Event-driven
Last evidence
Next due
Owner
Operations
TSC
CC9.2
Evidence folder
08_Vendor_Management
Automatable
No — human judgement
Policy
LEG-01
Policy version
v2.0 (2026-05-28)
Not automatable. DeftTrust schedules this control, prepares the pack and files the record it produces — it does not perform the judgement. The calendar still tracks it, so it cannot silently lapse.

Collectors

CollectorRelationshipSamplesWhat it observes
No collector references this control yet.

Evidence satisfying this control

CollectedCollectorResultSourceDigest
No artifact satisfies this control.