Security Requirements for External Providers

This document sets out the minimum security requirements that your organisation requires of its external providers – the organizations that carry, store, handle, clear or manage goods on its behalf, or that provide services, systems, materials or personnel that affect the security of its supply chain. It is written to be shared with providers, so that they understand clearly and in one place what is expected of them.

What's Inside

• Security Requirements
• Application of These Requirements
• Provider Security Requirements Acknowledgement
• Provider Security Incident Notification
• Provider Change Notification

ISO 28000 Alignment

Supports ISO 28000:2022 requirements, including Clauses 7.4, 8.1, 8.2 and 9.1. It fits with the rest of the QEHS Vault ISO 28000 document set.

Format

Supplied as a fully editable Microsoft Word (.docx) file. Add your organisation’s name, logo and details, then use it straight away. Instant download after purchase.