BS ISO/IEC 27036-2:2022
$189.07
Cybersecurity. Supplier relationships – Requirements
Published By | Publication Date | Number of Pages |
BSI | 2022 | 50 |
PDF Catalog
PDF Pages | PDF Title |
---|---|
2 | undefined |
7 | Foreword |
8 | Introduction |
9 | 1 Scope 2 Normative references 3 Terms and definitions 4 Abbreviated terms |
10 | 5 Structure of this document 5.1 Clause 6 5.1.1 General 5.1.2 Organizational project-enabling processes 5.1.3 Technical management processes |
11 | 5.2 Clause 7 5.3 Relationship between Clause 6 and Clause 7 |
13 | 5.4 Annexes 6 Information security in supplier relationship management 6.1 Agreement processes 6.1.1 Acquisition process |
15 | 6.1.2 Supply process |
16 | 6.2 Organizational project-enabling processes 6.2.1 Life cycle model management process 6.2.2 Infrastructure management process |
17 | 6.2.3 Project portfolio management process 6.2.4 Human resource management process |
18 | 6.2.5 Quality management process 6.2.6 Knowledge management process |
19 | 6.3 Technical management processes 6.3.1 Project planning process 6.3.2 Project assessment and control process 6.3.3 Decision management process 6.3.4 Risk management process |
21 | 6.3.5 Configuration management process 6.3.6 Information management process 6.3.7 Measurement process |
22 | 6.3.8 Quality assurance process 6.4 Technical processes 6.4.1 Business or mission analysis process 6.4.2 Architecture definition process |
23 | 7 Information security in a supplier relationship instance 7.1 Supplier relationship planning process 7.1.1 Objective 7.1.2 Inputs 7.1.3 Activities |
24 | 7.1.4 Outputs |
25 | 7.2 Supplier selection process 7.2.1 Objectives 7.2.2 Inputs 7.2.3 Activities |
29 | 7.2.4 Outputs 7.3 Supplier relationship agreement process 7.3.1 Objective |
30 | 7.3.2 Inputs 7.3.3 Activities |
32 | 7.3.4 Outputs |
33 | 7.4 Supplier relationship management process 7.4.1 Objectives |
34 | 7.4.2 Inputs 7.4.3 Activities |
35 | 7.4.4 Outputs |
36 | 7.5 Supplier relationship termination process 7.5.1 Objectives 7.5.2 Inputs 7.5.3 Activities |
37 | 7.5.4 Outputs |
38 | Annex A (informative) Correspondence between ISO/IEC/IEEE 15288 and this document |
40 | Annex B (informative) Correspondence between ISO/IEC 27002 controls and this document |
42 | Annex C (informative) Objectives from Clauses 6 and 7 |
46 | Bibliography |