Cyber incident reviews routinely show that vendors and service providers create significant risks for many organizations. This Toolkit provides resources to help organizations manage supply chain and service provider cyber risks, including model contract clauses. For detailed guidance on developing and maintaining a reasonable information security program and responding to cyber incidents, see Cybersecurity Toolkit (US).