ISO 27001 5.20 Addressing Information Security Within Supplier Agreements

Requirement

"Relevant information security requirements shall be established and agreed with each supplier based on the type of supplier relationship."[1]

Explanation

As part of contracts signed with suppliers require them to meet organization security requirements.

References

  1. ISO/IEC 27001

Need help putting this into practice? See our ISO 27001 compliance services or read our ISO 27001 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo

See LakeRidge in action.

Loading the booking calendar…