Cyber Security Guidelines for Suppliers

This document is a guide outlining the cyber security requirements for suppliers associated with Samhammer. It emphasizes the importance of maintaining the availability, confidentiality, and integrity of processes and information. The guide specifies that all suppliers must adhere to a basic minimum level of cyber security, which may be supplemented by specific requirements based on the nature of the delivery items. It details general provisions for suppliers, including the need for systematic cyber security risk management and compliance with obligations by external employees and subcontractors. The document also outlines the necessity for regular training of supplier employees on cyber security risks and regulations. Furthermore, it addresses the protocols for reporting cyber security incidents and the responsibilities of suppliers in managing these incidents. The guide concludes with specific requirements for suppliers of digitally related services, emphasizing secure development processes and documentation standards.