{"id":54897,"date":"2025-08-13T03:09:40","date_gmt":"2025-08-13T03:09:40","guid":{"rendered":"https:\/\/www.process.st\/templates\/?p=54897"},"modified":"2025-08-13T03:09:40","modified_gmt":"2025-08-13T03:09:40","slug":"due-diligence-checklist-for-supplier-management-following-iso-iec-27002","status":"publish","type":"post","link":"https:\/\/www.process.st\/templates\/due-diligence-checklist-for-supplier-management-following-iso-iec-27002\/","title":{"rendered":"Due Diligence Checklist for Supplier Management Following ISO\/IEC 27002"},"content":{"rendered":"\n<section id=\"identify-potential-suppliers\">\n <h2>Identify potential suppliers<\/h2>\n <div class=\"text-content\">\n  Let's kick off our due diligence journey by identifying potential suppliers! This initial step sets the tone for the entire supplier management process. Are you wondering how to find credible suppliers? Think of industry events, online databases, and recommendations. It's crucial to gather a diverse list to assess, as it widens our options and enables informed decision-making later on. Remember to scrutinize their reputations and customer feedback, as this can save us potential headaches down the line!\n <\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> List of potential suppliers <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"collect-supplier-information\">\n <h2>Collect supplier information<\/h2>\n <div class=\"text-content\">\n  Gathering detailed information about each potential supplier is pivotal to our decision-making process. What do we want to know? Everything from their business history, financial stability, to their information security protocols! This is where we dig deep. It's incredibly rewarding to collect this data, as it gives us a clearer picture of who we might partner with. Make sure you utilize established databases and show diligence in your research to avoid future challenges!\n <\/div>\n <div class=\"multi-choice-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Types of information to collect <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Business history\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Financial stability\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Security protocols\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Customer feedback\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Industry experience\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"assess-suppliers-information-security-management-system\">\n <h2>Assess supplier's information security management system<\/h2>\n <div class=\"text-content\">\n  Let's roll up our sleeves and investigate the supplier's information security management system (ISMS). This task is essential because a robust ISMS is a strong indicator of a supplier's commitment to security. Do they have documented processes? Regular assessments? Uncovering the details about their ISMS can reveal potential vulnerabilities\u2014and provides assurance that they prioritize information security. Don't forget to ask for supporting documentation, as it could make or break this assessment!\n <\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Supplier ISMS documentation <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"evaluate-suppliers-compliance-with-isoiec-27002\">\n <h2>Evaluate supplier's compliance with ISO\/IEC 27002<\/h2>\n <div class=\"text-content\">\n  In this step, we shine a spotlight on how well the supplier aligns with ISO\/IEC 27002 standards. This internationally recognized standard is fundamental for ensuring best practices in information security. Can they demonstrate compliance? Assessing this ensures that they uphold data protection and confidentiality\u2014something we cannot overlook! Remember, any gaps in their compliance could signify potential risks. So, let's approach this task with a keen eye!\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Compliance status <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Fully compliant\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Partially compliant\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Not compliant\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Pending review\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Exempt\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"review-supplier-risk-assessments\">\n <h2>Review supplier risk assessments<\/h2>\n <div class=\"text-content\">\n  Reviewing supplier risk assessments is crucial as it helps us understand the risks involved in partnering with them. What vulnerabilities could affect us? By evaluating their past assessments, we can anticipate challenges and identify proactive measures. This isn't just about checking a box; it\u2019s about protecting our own operations. A thorough review can often unveil hidden risks that could lead to bigger issues later. So, let\u2019s evaluate carefully!\n <\/div>\n <div class=\"file-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Supplier's risk assessment reports <\/label>\n   <div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"><i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here<\/button>\n   <\/div>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-suppliers-previous-audit-reports\">\n <h2>Assess supplier's previous audit reports<\/h2>\n <div class=\"text-content\">\n  Let's dig into the supplier's past audit reports. These documents are goldmines of information! Why? They showcase the supplier's historical adherence to security protocols and highlight any issues they've encountered. Were there significant findings? How did they address them? Understanding their track record can help us gauge their reliability and accountability. Think of it as a history lesson that informs our future choices!\n <\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Previous audit report summary <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"analyze-suppliers-incident-response-plans\">\n <h2>Analyze supplier's incident response plans<\/h2>\n <div class=\"text-content\">\n  Analyzing a supplier's incident response plan is about understanding how they handle breaches or security incidents. An effective plan shows a proactive stance; it\u2019s prepared to minimize damage and communicate transparently. Does their plan address key components, like communication and recovery? Knowing this gives us the peace of mind that in the event of a crisis, they won't drop the ball\u2014and can effectively mitigate harm. Let's probe deeper into their strategies!\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Supplier's incident response plan outline <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"evaluate-supplier-training-and-awareness-programs\">\n <h2>Evaluate supplier training and awareness programs<\/h2>\n <div class=\"text-content\">\n  A knowledgeable workforce is key to strong information security. How does the supplier train their employees on security awareness? This step involves assessing their training programs and the frequency of training sessions. Do they cover current threats and compliance requirements? Evaluating these factors assures us that the supplier takes responsibility for its employees' security practices. Let's ensure they are prepared to handle sensitive information appropriately!\n <\/div>\n <div class=\"multi-choice-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Training topics covered <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Security awareness\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Data protection\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Phishing prevention\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Incident response\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Regulatory compliance\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"verify-suppliers-contractual-obligations-related-to-information-security\">\n <h2>Verify supplier's contractual obligations related to information security<\/h2>\n <div class=\"text-content\">\n  In this task, we ensure that all contractual obligations concerning information security are tightly outlined. What specific responsibilities do they have regarding data protection? This is critical to avoid misunderstandings later. Contracts should clearly define security protocols and liability. A robust agreement not only solidifies our partnership but also mitigates risks. Reviewing these terms thoroughly is vital\u2014are all bases covered?\n <\/div>\n <div class=\"textarea-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Contractual obligations summary <\/label> <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled class=\"form-control\"><\/textarea>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"conduct-site-visits-for-highrisk-suppliers\">\n <h2>Conduct site visits for high-risk suppliers<\/h2>\n <div class=\"text-content\">\n  When dealing with high-risk suppliers, a site visit can be invaluable. It's our chance to see firsthand how they operate. Are their security measures robust? This task reinforces transparency and trust between us and the supplier. Seeing their operations live can reveal important details that paperwork alone may not communicate. Make sure to prepare questions ahead of time and assess their security measures during your visit\u2014what insights will you gather?\n <\/div>\n <div class=\"members-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Site visit team members <\/label> <select disabled class=\"form-control\"> <option value=\"A member or group will be selected here\">A member or group will be selected here<\/option> <\/select>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"check-suppliers-certifications-and-accreditations\">\n <h2>Check supplier\u2019s certifications and accreditations<\/h2>\n <div class=\"text-content\">\n  Verifying a supplier\u2019s certifications and accreditations is a vital component of our due diligence. Certifications serve as proof that they meet industry standards for information security. Which certifications do they hold? Are they up-to-date? This process gives us confidence in their capabilities and adherence to best practices. Let\u2019s ensure we\u2019re partnering with a well-regarded supplier who values security as much as we do!\n <\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> List of supplier certifications <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"approval-supplier-risk-assessment\">\n <h2>Approval: Supplier Risk Assessment<\/h2>\n <div class=\"approval-content\">\n  <div class=\"header\">\n   <div class=\"list-title\">\n    Will be submitted for approval:\n   <\/div>\n  <\/div>\n  <div class=\"approval-rule-subject-tasks-list\">\n   <ul class=\"list\">\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Identify potential suppliers<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Collect supplier information<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Assess supplier's information security management system<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Evaluate supplier's compliance with ISO\/IEC 27002<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Review supplier risk assessments<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Assess supplier's previous audit reports<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Analyze supplier's incident response plans<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Evaluate supplier training and awareness programs<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Verify supplier's contractual obligations related to information security<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Conduct site visits for high-risk suppliers<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Check supplier\u2019s certifications and accreditations<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n   <\/ul>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"make-final-decision-on-supplier-selection\">\n <h2>Make final decision on supplier selection<\/h2>\n <div class=\"text-content\">\n  After thorough evaluations, it\u2019s time to make our final decision. Who are we ready to partner with? This pivotal step synthesizes all prior assessments, from risk evaluations to compliance checks. Truly, this decision impacts our future security posture and operations. Remember to weigh all factors carefully, and don't rush\u2014this decision impacts the larger narrative of our supplier ecosystem!\n <\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Chosen supplier <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      1\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Supplier A\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      2\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Supplier B\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      3\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Supplier C\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      4\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Supplier D\n    <\/div><\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">\n      5\n     <\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">\n     Supplier E\n    <\/div><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"notify-selected-supplier\">\n <h2>Notify selected supplier<\/h2>\n <div class=\"text-content\">\n  You did it! Now it\u2019s time to inform the selected supplier. Communication is key\u2014will they be thrilled? Crafting this message is about clarity and enthusiasm, as it marks the beginning of a fruitful partnership. Keep it professional but warm! Be sure to include key details on the next steps and expectations. Let\u2019s make sure this email hits the right tone and conveys our excitement for the collaboration!\n <\/div>\n <div class=\"send-rich-email-content form-field-content\">\n  <!-- No Recipients --> <!-- No Recipients --> <!-- No Recipients -->\n  <div class=\"form-group subject\">\n   <label>Subject<\/label>\n   <p class=\"form-control-static\">Congratulations! You Are Our Selected Supplier!<\/p>\n  <\/div>\n  <div class=\"form-group body\">\n   <label>Body<\/label> <iframe srcdoc=\"<p>Dear [Supplier Name],<\/p><p>We are excited to inform you that you have been selected as our supplier! Your strengths in information security stood out during our evaluation process, and we look forward to a successful collaboration.<\/p><p>Let\u2019s discuss the next steps and any formalities we need to finalize.<\/p><p>Sincerely,<\/p><p>[Your Name]<\/p><p>[Your Company]<\/p>\n<style>*{font-family:Inter,&quot;Segoe UI&quot;,&quot;Roboto&quot;,&quot;Oxygen&quot;,&quot;Ubuntu&quot;,&quot;Cantarell&quot;,&quot;Fira Sans&quot;,&quot;Droid Sans&quot;,&quot;Helvetica Neue&quot;,system-ui,sans-serif}<\/style>\n\" sandbox=\"\"><\/iframe>\n  <\/div>\n  <div class=\"form-group\">\n   <button type=\"button\" disabled class=\"btn btn-default\"><i class=\"fa fa-envelope btn-icon\"><\/i> Send<\/button>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"prepare-supplier-onboarding-documentation\">\n <h2>Prepare supplier onboarding documentation<\/h2>\n <div class=\"text-content\">\n  The final step is preparing onboarding documentation for our new supplier. Why is this so important? Proper onboarding ensures a smooth transition and sets clear expectations. What essential documents do we need? Think of contracts, policies, and communication guidelines. Providing clear and comprehensive documentation avoids confusion and allows our collaboration to kick off effortlessly. It lays the groundwork for a successful partnership moving forward. Let\u2019s get organized!\n <\/div>\n <div class=\"file-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Supplier onboarding documents <\/label>\n   <div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"><i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here<\/button>\n   <\/div>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"approval-supplier-onboarding-documentation\">\n <h2>Approval: Supplier Onboarding Documentation<\/h2>\n <div class=\"approval-content\">\n  <div class=\"header\">\n   <div class=\"list-title\">\n    Will be submitted for approval:\n   <\/div>\n  <\/div>\n  <div class=\"approval-rule-subject-tasks-list\">\n   <ul class=\"list\">\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Make final decision on supplier selection<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Notify selected supplier<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Prepare supplier onboarding documentation<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n   <\/ul>\n  <\/div>\n <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>Identify potential suppliers Let's kick off our due diligence journey by identifying potential suppliers! This initial step sets the tone for the entire supplier management process. Are you wondering how to find credible suppliers? Think of industry events, online databases, and recommendations. It's crucial to gather a diverse list to assess, as it widens our [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ep_exclude_from_search":false,"cover_icon_emoji":"\ud83d\udccb","cover_icon_url":"","tasks_count":"16","template_description":"Streamline supplier management with a comprehensive due diligence checklist, ensuring compliance with ISO\/IEC 27002 and enhancing information security.","template_id":"reMaX7Soyjh1bwOZC6pNcw","task_0":"Identify potential suppliers","task_slug_0":"identify-potential-suppliers","task_1":"Collect supplier information","task_slug_1":"collect-supplier-information","task_2":"Assess supplier's information security management system","task_slug_2":"assess-suppliers-information-security-management-system","task_3":"Evaluate supplier's compliance with ISO\/IEC 27002","task_slug_3":"evaluate-suppliers-compliance-with-isoiec-27002","task_4":"Review supplier risk assessments","task_slug_4":"review-supplier-risk-assessments","task_5":"Assess supplier's previous audit reports","task_slug_5":"assess-suppliers-previous-audit-reports","task_6":"Analyze supplier's incident response plans","task_slug_6":"analyze-suppliers-incident-response-plans","task_7":"Evaluate supplier training and awareness programs","task_slug_7":"evaluate-supplier-training-and-awareness-programs","task_8":"Verify supplier's contractual obligations related to information security","task_slug_8":"verify-suppliers-contractual-obligations-related-to-information-security","task_9":"Conduct site visits for high-risk suppliers","task_slug_9":"conduct-site-visits-for-highrisk-suppliers","task_10":"Check supplier\u2019s certifications and accreditations","task_slug_10":"check-suppliers-certifications-and-accreditations","task_11":"Approval: Supplier Risk Assessment","task_slug_11":"approval-supplier-risk-assessment","task_12":"Make final decision on supplier selection","task_slug_12":"make-final-decision-on-supplier-selection","task_13":"Notify selected supplier","task_slug_13":"notify-selected-supplier","task_14":"Prepare supplier onboarding documentation","task_slug_14":"prepare-supplier-onboarding-documentation","task_15":"Approval: Supplier Onboarding Documentation","task_slug_15":"approval-supplier-onboarding-documentation","task_16":"","task_slug_16":"","task_17":"","task_slug_17":"","task_18":"","task_slug_18":"","task_19":"","task_slug_19":"","task_20":"","task_slug_20":"","task_21":"","task_slug_21":"","task_22":"","task_slug_22":"","task_23":"","task_slug_23":"","task_24":"","task_slug_24":"","task_25":"","task_slug_25":"","task_26":"","task_slug_26":"","task_27":"","task_slug_27":"","task_28":"","task_slug_28":"","task_29":"","task_slug_29":"","task_30":"","task_slug_30":"","task_31":"","task_slug_31":"","task_32":"","task_slug_32":"","task_33":"","task_slug_33":"","task_34":"","task_slug_34":"","task_35":"","task_slug_35":"","task_36":"","task_slug_36":"","task_37":"","task_slug_37":"","task_38":"","task_slug_38":"","task_39":"","task_slug_39":"","task_40":"","task_slug_40":"","task_41":"","task_slug_41":"","task_42":"","task_slug_42":"","task_43":"","task_slug_43":"","task_44":"","task_slug_44":"","task_45":"","task_slug_45":"","task_46":"","task_slug_46":"","task_47":"","task_slug_47":"","task_48":"","task_slug_48":"","task_49":"","task_slug_49":"","task_50":"","task_slug_50":"","task_51":"","task_slug_51":"","task_52":"","task_slug_52":"","task_53":"","task_slug_53":"","task_54":"","task_slug_54":"","task_55":"","task_slug_55":"","task_56":"","task_slug_56":"","task_57":"","task_slug_57":"","task_58":"","task_slug_58":"","task_59":"","task_slug_59":"","task_60":"","task_slug_60":"","task_61":"","task_slug_61":"","task_62":"","task_slug_62":"","task_63":"","task_slug_63":"","task_64":"","task_slug_64":"","task_65":"","task_slug_65":"","task_66":"","task_slug_66":"","task_67":"","task_slug_67":"","task_68":"","task_slug_68":"","task_69":"","task_slug_69":"","task_70":"","task_slug_70":"","task_71":"","task_slug_71":"","task_72":"","task_slug_72":"","task_73":"","task_slug_73":"","task_74":"","task_slug_74":"","task_75":"","task_slug_75":"","task_76":"","task_slug_76":"","task_77":"","task_slug_77":"","task_78":"","task_slug_78":"","task_79":"","task_slug_79":"","task_80":"","task_slug_80":"","task_81":"","task_slug_81":"","task_82":"","task_slug_82":"","task_83":"","task_slug_83":"","task_84":"","task_slug_84":"","task_85":"","task_slug_85":"","task_86":"","task_slug_86":"","task_87":"","task_slug_87":"","task_88":"","task_slug_88":"","task_89":"","task_slug_89":"","task_90":"","task_slug_90":"","task_91":"","task_slug_91":"","task_92":"","task_slug_92":"","task_93":"","task_slug_93":"","task_94":"","task_slug_94":"","task_95":"","task_slug_95":"","task_96":"","task_slug_96":"","task_97":"","task_slug_97":"","task_98":"","task_slug_98":"","task_99":"","task_slug_99":"","footnotes":""},"categories":[74,72,37],"tags":[],"class_list":["post-54897","post","type-post","status-publish","format-standard","hentry","category-compliance","category-cybersecurity","category-iso"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/54897","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/comments?post=54897"}],"version-history":[{"count":1,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/54897\/revisions"}],"predecessor-version":[{"id":54899,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/54897\/revisions\/54899"}],"wp:attachment":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media?parent=54897"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/categories?post=54897"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/tags?post=54897"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}