Handlevagon 0
Standard

ISO/IEC 27036-3:2023

Historisk utkast

Merknad: Denne standarden har en ny utgave: ISO/IEC 27036-3:2023

Forhåndsvisning

Rettelser og tillegg kjøpes separat.

Språk
Tjenester

Omfang

This document provides guidance for product and service acquirers, as well as suppliers of hardware, software and services, regarding: a) gaining visibility into and managing the information security risks caused by physically dispersed and multi-layered hardware, software, and services supply chains; b) responding to risks stemming from this physically dispersed and multi-layered hardware, software, and services supply chain that can have an information security impact on the organizations using these products and services; c) integrating information security processes and practices into the system and software life cycle processes, as described in ISO/IEC/IEEE 15288 and ISO/IEC/IEEE 12207, while supporting information security controls, as described in ISO/IEC 27002. This document does not include business continuity management/resiliency issues involved with the hardware, software, and services supply chain. ISO/IEC 27031 addresses information and communication technology readiness for business continuity.

Dokumentinformasjon

  • Standard fra ISO
  • Publisert:
  • Utgave: 2
  • Versjon: 1
  • Varetype: IS
  • Products.Specs.pages
  • ICS 35.030
  • ISO TC ISO/IEC JTC 1/SC 27

Produktrelasjon

Produkt livssyklus