+Subcontracting Monitoring

Subcontracting Monitoring

With regards to subcontracts that support a critical or important function:Institute a process of continuous improvement and monitoring to enhance subcontracting practices and mitigate associated risks. Regularly review and update subcontracting conditions based on changing business environments and risk assessments. Conduct periodic assessments of subcontracting criteria, including ICT threats, concentration risks, and geopolitical factors. Monitor and evaluate the effectiveness of subcontracting controls through contractual rights of access and inspection. Proactively identify and address any deficiencies or emerging risks to strengthen subcontracting governance and oversight.

1. Přehled

Název	Standard

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky
Zdroj	Požadavek

3. Související regulace

Regulace
Zdroj	Regulace

NOREA -
EN: DORA in Control Framework of NOREA, the Dutch professional association of IT auditors, https://www.norea.nl/. © NOREA. Reproduced with the permission of NOREA; converted into the GRCA format. Only the version published by NOREA is authoritative.

DE: DORA in Control Framework von NOREA, dem niederländischen Berufsverband der IT-Auditoren, https://www.norea.nl/. © NOREA. Wiedergabe mit Genehmigung von NOREA; in das GRCA-Format umgewandelt. Maßgeblich ist allein die von NOREA veröffentlichte Fassung.