6-step processes to possess approaching vendor protection predicated on ISO 27001