What is EN ISO 27036-2:2018 ?

EN ISO 27036-2:2018 and EN ISO 27035-1:2018 are both part of the ISO/IEC 27000 series, which is a set of global standards for managing information security. These standards provide guidance to organizations on how to effectively manage the risks associated with information security when engaging with external suppliers.

EN ISO 27036-2:2018 is focused on information security for supplier relationships, while EN ISO 27035-1:2018 is focused on managing information security incidents within an organization. Both standards are designed to minimize the impact of information security incidents on the organization's operations and reputation.

EN ISO 27036-2:2018 has several key elements that organizations should consider when implementing the standard. These elements include the establishment of policies and procedures for managing information security risks associated with supplier relationships, the implementation of a risk management framework, the establishment of a supply chain security management system, and the provision of training and awareness programs for employees.

EN ISO 27035-1:2018 also has several key components that organizations should consider when implementing the standard. These components include the establishment of an incident management system, the provision of training and awareness programs for incident management, and the establishment of a process for incident reporting and assessment.

ConclusionEN ISO 27036-2:2018 and EN ISO 27035-1:2018 are important international standards that provide guidance to organizations on how to effectively manage the risks associated with information security when engaging with external suppliers. By implementing these standards, organizations can minimize the impact of information security incidents on their operations and reputation and ensure the security of their information throughout the supply chain.