10.1.2 Does your organisation have a list of its suppliers that handle personal information, the products and services they deliver, and their contact details?

10.2.1 Do your organisation’s IT system suppliers have cyber security certification?