Third party access

Contractual provisions and policies are in place regarding third party access to systems containing sensitive information