ISM-1638—ISM-1638
>Control Description
An outsourced cloud service register contains the following for each outsourced cloud service:
· cloud service provider’s name
· cloud service’s name
· purpose for using the cloud service
· sensitivity or classification of data involved
· due date for the next security assessment of the cloud service
· contractual arrangements for the cloud service
· point of contact for users of the cloud service
· 24/7 contact details for the cloud service provider.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.