ISO 27001 5.21 Managing Information Security In The Information and Communication Technology (ICT) Supply Chain

Requirement

"Processes and procedures shall be defined and implemented to manage the information security risks associated with the ICT products and services supply chain."[1]

Explanation

Require suppliers to meet security requirements defined by your organization. The organization can send the supplier a security questionnaire to complete.

References

ISO/IEC 27001

Need help putting this into practice? See our ISO 27001 compliance services or read our ISO 27001 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo