Supplier and Supply Chain Management

Demonstrating Direct Hit’s commitment to compliance and accountability in Supplier Management and Supply Chain Management, reinforcing transparency and information in contractual relationships, please consult here the main General or Special Policies, Operational Procedures, Procurement Instructions or Security Measures in force in the organization as of today.

Data Processing

General Terms and Conditions for the Processing of Personal Data by Subcontractors

Treatment Instructions

General Instructions for the Processing of Personal Data for Subcontractors

Supply Chain Security

Security Policy in the Supply Chain (NIS2)

Supplier Risk Assessment

Operational Procedure for Supplier Risk Assessment and Classification (GDPR+NIS2)

Incident Management

Unified Incident Reporting and Management Procedure (GDPR+NIS2)

Compliance Requirements

Minimum Compliance Requirements for Critical Suppliers and Subcontractors

Sample Contract Clauses

Standard Contractual Clauses for Data Protection and Information Security

Audits and Verifications

Procedure for Integrated Supplier Audits

Training and Awareness

Training Guide for Suppliers in Data Protection and Cybersecurity

Due Diligence Questionnaire

Supplier Pre-Assessment Questionnaire (GDPR+NIS2)

Business Continuity Plans

Business Continuity Requirements for Critical Suppliers

Digital Security

Technical Requirements for Digital Security for Suppliers