Information Security in Supplier Contracts: ISO 27036 Part 2, Clause 7.4 - Supplier Relationship Management Process

Howard and Jim chat about  ISO 27036-2, Clause 7.4 - Supplier Relationship Management Process.

Points discussed include:

1.  The importance for organizations to have a process for managing supplier relationships in terms of information security.
2.  The potential risks or vulnerabilities that organizations may face when it comes to information security in the supply chain.
3.  What organizations can do to ensure that their suppliers are meeting the information security requirements stated in the contract.
4.  The role communication plays in ensuring successful supplier relationship management in terms of information security.
5.  The ways organizations can effectively monitor and enforce compliance with information security requirements in the supplier relationship.
6.  Key considerations for organizations when transitioning from one supplier to another in terms of information security.
7.  What organizations can do to mitigate the risks associated with information security during the transition to a new supplier.
8.   The steps organizations can take to train their employees on information security requirements in the supplier relationship.
9.  The potential challenges or obstacles that organizations may face when managing supplier relationships in terms of information security.
10.  What steps can organizations prepare for and respond to situations where information security issues arise in the supplier relationship?

Complimentary ISO Resources

Click here to try Conformance 1's free online ISO 27001 Gap Checklist.

Upcoming Episodes

Howard and Jim chat about: 

• ISO 27036-2 Supplier Relationship Requirements - Clause 7.5 - Supplier Relationship Termination Process

Next Steps

If you enjoyed this episode, please follow us on your preferred podcast directory. We appreciate your likes & comments, and invite you to share episode with anyone who might benefit from learning about this topic.   

Click here to visit the SimplifyISO website to discover how our cloud-based management system will satisfy all the Standards requirements, client requirements, and any other requirements that you have to meet.

Click here to visit the International Management System Institute website so that you can learn about how and why you should consider becoming a Certified ISO Management System Professional.

Learn more about Jim on LinkedIn & YouTube

LinkedIn
LinkedIn Articles:
YouTube

Learn more about Howard

Click here to learn more about the Coaching and Podcast Services provided by Fox Coaching, inc.

Keywords

#ISO #ISO27001 #ISO27001Certification #InformationSecurityManagementSystems  #SupplierRelationshipAgreement