History

Priority

must

Nov 2018

Removed

Removed due to covering the same intent as security control 0064.

2017

Service providers’ systems that are used to provide information technology services, includingoutsourced cloud services, must be accredited prior to handling government information.

2015

Service providers’ systems that are used to provide information technology services, includingoutsourced cloud services, must be accredited prior to handling government information.

2010

Systems used by service providers for the provision of information technology services and functionsmust be accredited to the same minimum standard as the sponsoring agency’s systems.