History
- Priority
- must
- Mar 2020
- Removed
- Security control 1396 was removed to reflect the outcomes of the independent review of the ACSC’s Cloud Services Certification Program.
- Jan 2020
- If using an outsourced cloud service not listed on the ACSC’s Certified Cloud Services List, or for highly classified information, the ACSC is notified in writing at the earliest opportunity, and certainly before entering into or renewing a contract.
- 2015
- Agencies proposing to use outsourced cloud services not listed on ASD’s CCSL must notifyASD in writing at the earliest opportunity and certainly before entering into or renewing acontract with a cloud service provider.