RITM2050642 - Vendor Review- LibreOffice

Global Information Security Assessment for New Jabil Suppliers 

Hi,

My name is Ulvi Mehdiyev, I oversee vendor assessments for Jabil Corporate, headquartered in St. Petersburg, Florida. All new suppliers and their solutions must undergo a security review prior to being embedded in the Jabil environment. As a result, I must conduct a review to determine whether appropriate security controls are in place.  Considering this, my request requires the following: 

a)       If your organization has undergone a Service Organization Control Engagement (resulting in a SOC report), or has been certified against ISO 27001, could you please provide me with the most recent report and/or certificate?  If you have both, please send both.  

b)      If this documentation is unavailable, a questionnaire will need to be filled out. When filling out the questionnaire, please include as much commentary as you are able.  

 

c)       Any other documentation that outlines implemented security practices (e.g., policies and procedures relevant to information security practices). At this time, I also require a copy of the current contract to review against our security requirements (if available).  

Your help in this matter is greatly appreciated. I look forward to hearing from you. 

Best,