15.3—Classify Service Providers
IG2
IG3
Users
Govern
>Control Description
Classify service providers. Classification consideration may include one or more characteristics, such as data sensitivity, data volume, availability requirements, applicable regulations, inherent risk, and mitigated risk. Update and review classifications annually, or when significant enterprise changes occur that could impact this Safeguard.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.