Supply chain security
Cybersecurity risk-management measures must include "supply chain security, including security-related aspects concerning the relationships between each entity and its direct suppliers or service providers".
Independent security assurance
Evidence foundA current SOC 2 report or ISO/IEC 27001 certificate is the usual evidence that a supplier operates appropriate security measures.
- SOC 2Vendor states SOC 2 Type II on its trust centreas of 21 Sep 2026
Security testing and documentation
Evidence foundA penetration test report, a completed standard questionnaire (SIG, CAIQ, HECVAT) or security documentation shows how the supplier tests and runs its controls.
- Penetration testing"Do you conduct annual penetration testing?" Yes. As part of our commitment to security, Albiware conducts independent third-party penetration testing at least annually to identify and remediate potential vulnerabilities.as of 21 Sep 2026