Cybersecurity: Should you seek your vendors’ BCPs?

The CCO requests the documents annually but reserves an even more sophisticated review every three years. It pays a cybersecurity firm to conduct detailed due diligence on the three key vendors