A minimum notification period of one month by service providers for significant changes to their own service provider arrangements is documented in contractual arrangements with service providers.
Topic
Contractual security requirements with service providers
Applicable to
all
History
Dec 2022
A minimum notification period of one month by service providers for significant changes to their own service provider arrangements is documented in contractual arrangements with service providers.
The existing control relating to service providers providing notification of significant changes to their own service provider arrangements was amended to ensure a minimum notification period of one month is provided to customers.
Dec 2022
A minimum notification period of one month by service providers for significant changes to their own service provider arrangements is documented in contractual arrangements with service providers.
Language from existing controls relating to ‘contractual arrangements’ was amended to ‘contractual arrangements with service providers’.
Sep 2022
Notification by service providers of significant changes to their own service provider arrangements is documented in contractual arrangements.
A new control was added covering documenting in contractual arrangements a requirement for service providers to notify their customers of significant changes to their own service provider arrangements.