Procedure
Supplier Onboarding Security Review Procedure
This procedure defines the steps, gates, and responsibilities for conducting a security review as part of the supplier onboarding process. It ensures that every new supplier is risk-classified, assessed against the requirements of supply-chain/standard-supplier-security-and-privacy-assurance.md, and approved before receiving access to organization systems, data, or networks.
- Type
- Procedure
- Version
- 1.0.10
- Date
- 2026-09-25
- Owner
- Supplier Risk Maintainer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Supply Chain Governance: Onboarding
- Review frequency
- Annual and upon significant process change or regulatory update
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Trigger
- Roles and responsibilities
- Procedure steps
- Decision gates
- Escalation matrix
Related documents
- supply-chain/
README.md (opens in a new tab) source - Supplier and Cloud Governance Frameworksupply-chain
- Third-Party and Supply Chain Risk Standardrisk
- Supplier Security and Privacy Assurance Standardsupply-chain
- Supplier Due Diligence Proceduresupply-chain
- Supplier Security Questionnairesupply-chain
- Supplier Risk Register Templatesupply-chain
- Subprocessor Register Templatesupply-chain
- Privacy Impact and Cross-Border Transfer Procedureprivacy
- Compliance, Audit, and CAPA Management Policycompliance
Next
All Documents