|
+Confidentiality agreements |
Confidentiality agreementsThe non-disclosure or confidentiality agreements to be agreed with internal employees, external service providers and suppliers of the Cloud Service Provider are based on the requirements identified by the Cloud Service Provider for the protection of confidential information and operational details.The agreements are to be accepted by external service providers and suppliers when the contract is agreed. The agreements must be accepted by internal employees of the Cloud Service Provider before authorisation to access data of cloud customers is granted. The requirements must be documented and reviewed at regular intervals (at least annually). If the review shows that the requirements need to be adapted, the non-disclosure or confidentiality agreements are updated. The Cloud Service Provider must inform the internal employees, external service providers and suppliers and obtain confirmation of the updated confidentiality or non-disclosure agreement. Additonal Criteria- Supplementary Information - About the CriteriaIn a confidentiality agreement it should be described: • Which information must be kept confidential; • The period for which this confidentiality agreement applies; • What actions must be taken upon termination of this agreement, e.g. destruction or return of data medium; • How the ownership of information is regulated; • What rules apply to the use and disclosure of confidential information to other partners, if necessary; and • The consequences of a breach of the agreement. Confidentiality or non-disclosure agreements can be signed by means of an electronic signature, insofar as this is legally binding. 1. Преглед
1.1 Препратки1.2 Идентифицирани изисквания1.3 Свързани регулации2. Идентифицирани изисквания
3. Свързани регулации
|