5.19
Information Security in Supplier Relationships
Define and implement processes and procedures to manage security risks associated with the use of the supplier products or services.
-
6.2.2.1 Organization using cloud applications and/or outsourcing IT services shall evaluate their risk tolerance level with how their outsourced IT providers handle and access their sensitive information.
-
-