Topic

Contractual security requirements with service providers

Applicable to

all

History

Dec 2022

Break clauses associated with failure to meet security requirements are documented in contractual arrangements with service providers.

A new control was added covering the inclusion of a break clause in contractual arrangements with service providers where service providers, or any subcontractors, are unable to meet security requirements.