Information security: Goods and services guide

This guide describes how to manage information security when buying and managing contracts for goods and services. Three tools to support this guide.

Information security supply chain risk management sets out foundational responsibilities:

Information security supply chain risk management: Goods and services

Use the Information security checklist contract development to ensure appropriate security related clauses are included in contracts:

Information security contract development - checklist: Goods and services

Information security audit provides an example to use for a supplier security audit.

Information security audit: Goods and services