8.2.2—8.2.2
>Control Description
+ Approval by the original customer.
+ contractually valid non-disclosure agreement exists:
- between contractor and subcontractor (company level),
- with all employees and project members of the subcontractor (personal obligation).
+ Ensuring compliance with the security requirements of the actual customer (proof is obtained).
+ Proof of the subcontractor’s compliance with minimum requirements for prototype protection (e.g., certificate, attestation) is provided.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.