A.15.2.2: Managing Changes to Supplier Services

Manage changes to supplier services, including maintaining and improving existing information security policies, procedures, and controls.