Securing the Supply Chain: Preventing your suppliers’ vulnerabilities from becoming your own

Sharing information with suppliers is essential for the supply chain to function. However information compromised in the supply chain can be just as damaging as that compromised from within the organisation.

The ISF’s Supply Chain Information Risk Assurance Process (SCIRAP) provides a scalable way to manage all contracts so that controls, rigour, frequency of evaluation, and assurance received are proportionate to the information risk. The process integrates with existing vendor management processes and provides an established starting point, therefore making supply chain information risk management a part of normal business operations.

The full report also includes an Implementation Support Guide which provides clear and detailed guidance on deploying the ISF’s SCIRAP.