ISO/IEC 27036-3:2023
Current
The latest, up-to-date edition.
Cybersecurity — Supplier relationships — Part 3: Guidelines for hardware, software, and services supply chain security
Hardcopy , PDF
English
13-06-2023
This document provides guidance for product and service acquirers, as well as suppliers of hardware, software and services, regarding:
a) gaining visibility into and managing the information security risks caused by physically dispersed and multi-layered hardware, software, and services supply chains;
b) responding to risks stemming from this physically dispersed and multi-layered hardware, software, and services supply chain that can have an information security impact on the organizations using these products and services;
c) integrating information security processes and practices into the system and software life cycle processes, as described in ISO/IEC/IEEE 15288 and ISO/IEC/IEEE12207, while supporting information security controls, as described in ISO/IEC27002.
This document does not include business continuity management/resiliency issues involved with the hardware, software, and services supply chain. ISO/IEC 27031 addresses information and communication technology readiness for business continuity.
| DocumentType |
Standard
|
| Pages |
35
|
| PublisherName |
International Organization for Standardization
|
| Status |
Current
|
| Supersedes |
| Standards | Relationship |
| NEN-ISO/IEC 27036-3:2023 | Identical |
| DS/ISO/IEC 27036-3:2023 | Identical |
| ABNT NBR ISO/IEC 27036-3:2025 | Identical |
| BS ISO/IEC 27036-3:2023 | Equivalent |
| SS-ISO/IEC 27036-3:2024 | Identical |
| NS-ISO/IEC 27036-3:2023 | Identical |
Please Login or Create an Account so you can add users to your Multi user PDF Later.
Important note : All end users must be registered with an Account prior to user licenses being assigned.
Users cannot be edited or removed once added to your Multi user PDF.