ISO 27001 Annex A 5.23 Information security for use of cloud services is important because suppliers represent the biggest risk to you. If they are not doing the right thing it is your reputation, your finances, your success that is stake. Get supplier management correct and reduce the risk.