🔒 ISO 27036-1:2021 & ISO 27036-2:2022 Compliant
Supplier Risk Assessment
Evaluate and manage information security risks in supplier relationships
Overall Risk
30
Control Effectiveness
60%
Inherent Risk
60%
Before controls
Risk Level
LOW
Acceptable risk. Standard monitoring procedures.
Risk Distribution
Control Maturity
Risk Comparison
Supplier Information
$
years
Criticality Assessment
Business Criticality
Data Access Level
Service Dependency
Risk Assessment Categories
Moderate risk requiring monitoring
Moderate risk requiring monitoring
Moderate risk requiring monitoring
Moderate risk requiring monitoring
Moderate risk requiring monitoring
Control Maturity Assessment
Documented and standardized
Documented and standardized
Documented and standardized
Documented and standardized
Documented and standardized
About ISO 27036 Supplier Risk Assessment
This calculator implements ISO 27036-1:2021 and ISO 27036-2:2022 standards for information security in supplier relationships, helping organizations identify, assess, and manage security risks throughout the supplier lifecycle.
Key Components:
- • Supplier criticality assessment
- • Risk category evaluation
- • Control maturity analysis
- • Inherent vs residual risk
Risk Categories:
- • Information Security
- • Operational Risks
- • Financial Impact
- • Compliance & Legal
- • Reputational Damage
ISO 27036 Focus:
- • Supplier agreements
- • Security requirements
- • Ongoing monitoring
- • Incident management
- • Audit & review processes