Protecting Your Data: ISO 27036-1: Overview of Risks and Best Practices - Guidance for Supplier Relationships

Howard and Jim chat about  ISO 27036 Part I - Protecting Your Data: Overview of Understanding the Risks and Best Practices Guidance for Supplier Relationships.

Points discussed include:

1.  Why is due diligence important when choosing suppliers?
2.  Why it's important to evaluate the security practices and capabilities of suppliers to make sure that they meet your information security requirements.
3. What are the key factors to consider when evaluating supplier relationships for information security practices and capabilities?
4.  Why you need to have processes to manage the information security risks with interacting with your suppliers.
5.  Why you need to create a culture of information awareness, make sure every day, every single person in your in your organization is thinking information security all day long!

On Our Next Episodes

Howard and Jim chat about ISO 27036-2 - Requirements for Information Security in your Supplier Relationships.

Next Steps

If you enjoyed this episode, please follow us on your preferred podcast directory. We appreciate your likes & comments, and invite you to share episode with anyone who might benefit from learning about this topic.   

Click here to visit the SimplifyISO website to discover how our cloud-based management system will satisfy all the Standards requirements, client requirements, and any other ISO requirements that you have to meet.

Click here to visit the International Management System Institute website so that you can learn about how and why you should consider becoming a Certified ISO Management System Professional.

Click here to learn more about the ISO 27001 Gap Checklist.

Learn more about Jim on LinkedIn & YouTube

LinkedIn
LinkedIn Articles:
YouTube

Learn more about Howard

Click here to learn more about the Coaching and Podcast Services provided by Fox Coaching, inc.

Keywords

#ISO #ISO27001 #ISO27001Certification #InformationSecurityManagementSystems #AnnexA #RiskAssessment #ISOHarmonizedStructure #StatementofApplicability #InternationalStandardsDevelopmen #SimplifyISO #ISO27001:2022 #ISO27008