Business assets and suppliers

Business assets and suppliers

Fellow Digitals manages business assets and suppliers in a structured manner to protect information security, privacy, and the continuity of services. This control ensures that assets and external dependencies are identified, managed, and monitored in line with the Information Security Management System (ISMS).

Asset management and ownership

Business assets are registered and managed throughout their lifecycle. Ownership and responsibility are defined to ensure that information assets, systems, and supporting resources are handled appropriately. Controls are in place to support secure use, maintenance, and disposal of assets, reducing the risk of loss, misuse, or unauthorized access.

Suppliers and service providers

Suppliers and service providers play an important role in the delivery of Fellow Digitals’ services. Supplier selection and engagement follow a risk‑based approach that takes information security, privacy, and continuity requirements into account. Dependencies on suppliers, such as hosting providers and outsourced IT services, are identified and assessed as part of risk management and business impact considerations.

Supplier security and privacy requirements

Security and privacy requirements are applied within supplier relationships through contractual agreements and defined expectations. This supports alignment with Fellow Digitals’ security framework and helps manage risks across the service chain. Critical suppliers are subject to additional attention based on their role in the availability and continuity of services.

Monitoring of suppliers and dependencies

Supplier performance and risks are monitored during the lifecycle of the relationship. Changes in services, identified issues, or incidents involving suppliers may lead to reassessment or improvement actions where necessary.

Through the controlled management of business assets and suppliers, Fellow Digitals ensures that information security and privacy are not limited to internal processes, but are consistently addressed across the wider service chain.