What is EN ISO 27036-3: 2018 ?

EN ISO 27036-3: 2018 and EN ISO 27035-1: 2018 are both part of the ISO/IEC 27000 series, which is a set of global standards for managing information security. These standards provide guidance to organizations on how to effectively manage the risks associated with information security when engaging with external suppliers.

EN ISO 27036-3: 2018 is focused on information security for supplier relationships, while EN ISO 27035-1: 2018 is focused on managing information security incidents within an organization. Both standards are designed to minimize the impact of information security incidents on the organization's operations and reputation.

EN ISO 27036-3: 2018 provides guidance on establishing a structured and systematic approach to information security incident management. It includes a number of key components, such as incident detection, reporting, assessment, and response. The standard is intended to help organizations ensure the security of their information throughout the supply chain, while reducing the risks associated with third-party vendors and outsourcing processes.

EN ISO 27035-1: 2018 is focused on incident management within an organization. It provides guidelines for establishing a structured approach to incident management, including incident detection, reporting, assessment, and response. The standard is intended to help organizations minimize the impact of information security incidents on their operations and reputation, while ensuring the timely and effective management of incidents.

In conclusion, EN ISO 27036-3: 2018 and EN ISO 27035-1: 2018 are both important international standards for managing information security. They provide guidance to organizations on how to effectively manage the risks associated with information security when engaging with external suppliers and incident management. These standards are widely recognized and adopted by organizations around the world to ensure the security and reliability of their information systems.