Control 15 - Service Provider Management

Control 15 of the CIS Critical Security Controls focuses on managing service providers to protect organizational data and assets. It requires conducting due-diligence before engaging a provider, embedding security requirements into contracts, continuously monitoring provider performance, and terminating access when the relationship ends or requirements are not met.