Introduction to ISO 27036 : Information Security in Supplier Relationships
ISO/IEC 27036 is a part of the ISO/IEC 27000 family of standards that focuses on information security in supplier relationships. It provides guidelines for managing the security of information shared between organizations and their suppliers, addressing risks associated with outsourcing, procurement, and third-party services. The standard is divided into multiple parts, covering different aspects such as governance, risk management, and controls required to secure information exchanges. ISO 27036 aims to help organizations mitigate threats arising from their supply chain and ensure that all external partnerships adhere to security best practices.
email- [email protected]
#iso #audit #tnvakademi #certification #education #iso27036 #supplychain #management #security
Timecodes
0:00 - Introduction
1:16 - ISO 27036-1: Overview and Concepts
1:45 - ISO 27036-2: Requirements for Supplier Relationships
2:13 - ISO 27036-3: Guidelines for Information and Communication Technology Supply Chains
2:41 - Benefits Of Implementing ISO 27036
3:10 - Conclusion