5.20
Addressing Information Security Within Supplier Agreements
Establish and agree on relevant security requirements with each supplier based on their relationship type.
-
6.2.2.1 Organization using cloud applications and/or outsourcing IT services shall evaluate their risk tolerance level with how their outsourced IT providers handle and access their sensitive information.
-
-