Logo
Login Sign Up
Current Revision

ISO/IEC 27036-3:2023

Cybersecurity - Supplier relationships - Part 3: Guidelines for hardware, software, and services supply chain security
Best Price Guarantee
Instant

$194.00

2-5 Days

$194.00

SAVE 15%

$329.80


Sub Total (1 Item(s))

$ 0.00

Estimated Shipping

$ 0.00

Total (Pre-Tax)

$ 0.00


or
International Organization for Standardization Logo

ISO/IEC 27036-3:2023

Cybersecurity - Supplier relationships - Part 3: Guidelines for hardware, software, and services supply chain security

ISO/IEC 27036-3:2023

This document provides guidance for product and service acquirers, as well as suppliers of hardware, software and services, regarding:

a)    gaining visibility into and managing the information security risks caused by physically dispersed and multi-layered hardware, software, and services supply chains;

b)    responding to risks stemming from this physically dispersed and multi-layered hardware, software, and services supply chain that can have an information security impact on the organizations using these products and services;

c)    integrating information security processes and practices into the system and software life cycle processes, as described in ISO/IEC/IEEE 15288 and ISO/IEC/IEEE 12207, while supporting information security controls, as described in ISO/IEC 27002.

This document does not include business continuity management/resiliency issues involved with the hardware, software, and services supply chain. ISO/IEC 27031 addresses information and communication technology readiness for business continuity.

SDO ISO: International Organization for Standardization
Document Number ISO/IEC 27036
Publication Date Not Available
Language en - English
Page Count
Revision Level
Supercedes
Committee ISO/IEC JTC 1/SC 27
Publish Date Document Id Type View
Not Available ISO/IEC 27036-3:2023 Revision