5.22
Monitoring and Review and Change Management of Supplier Services
Regularly monitor, review, evaluate, and manage changes in supplier security practices and service delivery.
-
6.2.2.1 Organization using cloud applications and/or outsourcing IT services shall evaluate their risk tolerance level with how their outsourced IT providers handle and access their sensitive information.
-
-