PR.AT-3: Awareness and Training
Third-party stakeholders (e.g., suppliers, customers, partners) understand their roles and responsibilities.
—ID.GV-2: Governance
Information security roles and responsibilities are coordinated and aligned with internal roles and external partners.