Initiation
Prior to the issue of an external vendor request, the requirements from the external vendor
and any scoring system to evaluate responses should be clearly documented and agreed to
by all stakeholders in the process.
The external vendor request must incorporate any internal policies and procedure
requirements which the external vendor must adhere to during the period of the service. In
particular, the Information Security Policy should be reviewed to determine if there are any
specific security requirements which the external vendor must adhered to.
It is the responsibility of the requester (CBRE Relationship Owner) to ensure that this initiation
process is followed.