Vendor Management
VM-09Offboard vendors cleanly and retain records for seven years
How Leela would run itEvent-driven · at each termination; retention runs seven years from it
From the policy libraryThe requirement
When a relationship ends, the vendor’s access is revoked, confidential information is retrieved or destroyed with certification, obligations are settled, and the termination is recorded. Vendor records, including diligence files, contracts, reviews, and issues, are kept for seven years from the end of the relationship.
- Applies
- Tell Leela about your company to see whether this applies.
- Status
- Setup needed
Tell Leela how you handle it today, or hand it over: see what’s next.
The work
Run the offboarding checklist, obtain the data destruction certificate, mark the vendor terminated in the inventory, and key its record retention to the termination date.
What Leela keepsThe evidence this obligation leaves, as the work happens
Listed from the policy libraryContents
- 01Offboarding checklistAccess revoked, data returned or destroyed with certificate, obligations settled
- 02Retention schedule entryRecord class, period keyed to termination, location
Evidence
Offboarding checklist
Vendor Management §5.7, §12
2
of 2 records
The work and the records come from this obligation in the policy library.