Cybersecurity - Supplier relationships - Part 1: Overview and concepts

Standards Development Organisation:

Canadian Standards Association (operating as CSA Group)

Contact Information:

Canadian Standards Association (operating as CSA Group)

Working Program:

View the CSA work program

Designation Number:

ISO/IEC 27036-1

Standard Type:

National Standard of Canada - Adoption of International Standard

Standard Development Activity:

New Edition

ICS code(s):

35.030

Status:

Proceeding to development

SDO Comment Period Start Date:

2021-11-02

SDO Comment Period End Date:

2021-11-24

Posted On:

2021-10-26

Scope:

This document is an introductory part of ISO/IEC 27036. It provides an overview of the guidance intended to assist organizations in securing their information and information systems within the context of supplier relationships. It also introduces concepts that are described in detail in the other parts of ISO/IEC 27036. This document addresses perspectives of both acquirers and suppliers.

Project need:

To align Canadian requirements with those of international standards in the ICT subject area (adoption of new standard. This proposed New Standard is being developed at the request of P123 Technical Committee on Information Technology. It will provide the industry with the latest requirements in the field of ICT, including cybersecurity and software. This will meet the strategic needs of the following key interests: a) ensuring that the latest innovative/technology/safety features are available for users.

Note: The information provided above was obtained by the Standards Council of Canada (SCC) and is provided as part of a centralized, transparent notification system for new standards development. The system allows SCC-accredited Standards Development Organizations (SDOs), and members of the public, to be informed of new work in Canadian standards development, and allows SCC-accredited SDOs to identify and resolve potential duplication of standards and effort.

Individual SDOs are responsible for the content and accuracy of the information presented here. The text is presented in the language in which it was provided to SCC.