Another example is data protection risks when the supplier agreement involves transfer of, or access to, information across borders.
The organization needs to be aware that the legal or contractual responsibility for protecting information remains with the organization.