SSO-05—Exit strategy for the receipt of benefits
>Control Description
The Cloud Service Provider has defined and documented exit strategies for the purchase of services where the risk assessment of the service providers and suppliers regarding the scope, complexity and uniqueness of the purchased service resulted in a very high dependency (cf. Supplementary Information).
Exit strategies are aligned with operational continuity plans and include the following aspects:
• Analysis of the potential costs, impacts, resources and timing of the transition of a purchased service to an alternative service provider or supplier;
• Definition and allocation of roles, responsibilities and sufficient resources to perform the activities for a transition;
• Definition of success criteria for the transition; and
• Definition of indicators for monitoring the performance of services, which should initiate the withdrawal from the service if the results are unacceptable.
Additional criteria: -
Ask AI
Configure your API key to use AI features.