Under active development Content is continuously updated and improved

541.104(c)541.104(c)

>Control Description

Notwithstanding the requirement described by Subsection (b)(6)(D), a processor, in the alternative, may arrange for a qualified and independent assessor to conduct an assessment of the processor's policies and technical and organizational measures in support of the requirements under this chapter using an appropriate and accepted control standard or framework and assessment procedure. The processor shall provide a report of the assessment to the controller on request.

>Cross-Framework Mappings

Ask AI

Configure your API key to use AI features.