# SOC2 CC9.2

URL: /systems/trust-and-governance/criteria/soc2/cc9-2 · Id: `criterion:soc2:CC9.2`

> The entity assesses and manages risks associated with vendors and business partners.

The entity assesses and manages risks associated with vendors and business partners.

| Property | Value |
| --- | --- |
| Framework | SOC2 |
| Reference | `CC9.2` |
| Satisfied by | [Upstream review](/systems/trust-and-governance/controls/upstream-review) |