Supplier Management and Supply Chain
Demonstrating Borgstena’s commitment to compliance and accountability in the area of Supplier Management and the Supply Chain, reinforcing transparency and information in the contractual relationship, you can consult here the main General or Special Policies, Operating Procedures, Procurement Instructions or Security Measures in force in the organization as of today.
Data Treatment
General Conditions for the Treatment of Personal Data by Subcontractors
Treatment Instructions
General Instructions for Treatment Personal Data for Subcontractors
Security in the Supply Chain
Supply Chain Security Policy (NIS2)
Supplier Risk Assessment
Operational Procedure for Supplier Risk Assessment and Classification (GDPR+NIS2)
Incident Management
Unified Incident Notification and Management Procedure (GDPR+NIS2)
Compliance Requirements
Minimum Compliance Requirements for Critical Suppliers and Subcontractors
Model Contractual Clauses
Standard Contractual Clauses for Data Protection and Information Security
Audits and checks
Procedure for Integrated Supplier Audits
Training and Awareness
Data Protection and Cybersecurity Training Guide for Suppliers
Due Diligence Questionnaire
Supplier Pre-Assessment Questionnaire (GDPR+NIS2)
Continuity Plans
Business Continuity Requirements for Critical Suppliers
Digital Security
Digital Security Technical Requirements for Suppliers