External documents received¶
Purpose. Log of externally-originated documents the ISMS depends on — auditor checklists, customer questionnaires, supplier reports. Required by Control of Documented Information §7 (clause 7.5.3 — control of external documents).
| Received | From | Document | File | Status |
|---|---|---|---|---|
| 2026-08-07 | GetAgency (Aman) — SOC 2 Type 1 examiner | Open Standards SOC 2 Type 1 Checklist — 68 controls, CC1–CC9 (Security TSC) | 2026-08-07-getagency-soc2-type1-checklist.xlsx | Filled in from the ISMS — see the mapping |
Handling rules¶
- These are read-only records of what we received — do not rewrite an external document's content; track our responses in our own documents instead.
- Never store a copy containing customer personal data or secrets in this repo (see AGENTS.md); reference the controlled location instead.