ISO/WD 28018

A working group has prepared a draft.

Abstract

This document gives guidance on methods for understanding and extending the principles of security management embodied in ISO 28000 to the management of supplier and client relationships. It specifies how to develop and document a strategy to be better prepared to manage security in the supply chain. This document is generic and applicable to all organizations. It is applicable to suppliers of products, services and resources both upstream and downstream. This document is applicable to all materials and products. It does not apply to services as final outputs.