[1970-01-01]

The risk register is ISO 27001. The "I" in ISO doesn't stand for Internet, it stands for international. You shouldn't be doing business with international customers if you don't have a risk register, which is why they're requesting it.

[fareesh]

The D in Democratic People's Republic of Korea means it should be democratic so why is it a dictatorship?

The world doesn't work based on abbreviations. It's very normal for any company to ask you for ISO 27001 whether international or otherwise.

[SkinTaco]

Why is the line drawn at being international?

What is it about customers in Ethiopia that necessitates this? What is it about American (non-international) customers that doesn't require a register?

[hsbauauvhabzb]

Shouldn’t according to who? Who appointed ISO to say what should and shouldn’t be done?

[1970-01-01]

The majority of countries that do business today have backed it. You are welcome to ignore it and work against the 160 countries that are using it.

[hsbauauvhabzb]

who. Countries are not people.

[1970-01-01]

You can just Google this. https://www.iso.org/who-develops-standards.html