ISMS 5.19 - 5.22 - Third-Party Due-Diligence & Vendor Management Program

Document Name:ISMS 5.19 - 5.22 - Third-Party Due-Diligence & Vendor Management Program

Overview:  ISMS document from MorganHill detailing various requirements as noted by Controls 5.19 - 5.22 - 27002:2022 regarding Third-Party Due-Diligence & Vendor Management Program. 

We have over 100 + policies for ISO and dozens of specialty documents to choose from

Specifically, the document includes the following sections:

(1). Overview. (2). Phase I: Risk Based Approach. (3). Phase II: Define Risk and Appropriate Level of Due-Diligence for Identified Parties. (4). Phase III: Performing Due-Diligence (See Appendices to Use). (5). Vendor Management Program (See Appendices to Use). (6). Appendices: Appendix A – Initial Screening of Potential Third Parties, Appendix A.1 – Third-Party Information, Appendix B – Risk Factors for Due-Diligence, Appendix C.1 – Third-Party Due-Diligence Procedures – Key Risks, Appendix C.2 – Third-Party Due Diligence Procedures – Information Security , Appendix C.3 – Third-Party Due Diligence Procedures – PII & PHI , Appendix C.4 – Third-Party Due Diligence Procedures – Cardholder Data, Appendix C.5 – Third-Party Due Diligence Procedures – Compliance, Appendix C.6 – Third-Party Due Diligence Procedures – Reputation, Appendix C.7 – Third-Party Due Diligence Procedures – Strategic, Appendix C.8 – Third-Party Due Diligence Procedures – Operational, Appendix C.9 – Third-Party Due Diligence Procedures – Transaction, Appendix C.10 – Third-Party Due Diligence Procedures – Credit, Appendix C.11 – Third-Party Due Diligence Procedures – Country, Appendix C.12 – Third-Party Due Diligence Procedures – Third-Party, Appendix C.13 – Third-Party Due Diligence Procedures – Interest Rates, Appendix C.14 – Third-Party Due Diligence Procedures – Liquidity, Appendix C.15 – Third-Party Due Diligence Procedures – Legal, Appendix C.16 – Third-Party Due Diligence Procedures – Market, Appendix D.1 – Annual Vendor Management Questionnaire (All Risks and Categories).

ISMS Section:Section 5 - Organizational Controls

Control Mapping: ISO/IEC 27001:2022 Annex A Controls and Controls 5.19 - 5.22 - 27002:2022 

Format: Microsoft Word

Length: 58 pages.