5.21
Managing Information Security in the ICT Supply Chain
Define and implement procedures to manage security risks in the ICT supply chain.
-
6.2.2.1 Organization using cloud applications and/or outsourcing IT services shall evaluate their risk tolerance level with how their outsourced IT providers handle and access their sensitive information.
-
-