ISO 27001 5.22 Monitoring, Review and Change Management of Supplier Services

Requirement

"The organization shall regularly monitor, review, evaluate and manage change in supplier information security practices and service delivery."[1]

Explanation

Review supplier security certifications or organization provided questionnaires. Review supplier service delivery to ensure that they meet the organization's delivery requirements.

References

ISO/IEC 27001

Need help putting this into practice? See our ISO 27001 compliance services or read our ISO 27001 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo