+OPS.3.1.A3 Creating a Security Concept for the Outsourcing Project (S)

OPS.3.1.A3 Creating a Security Concept for the Outsourcing Project (S)

An outsourcing service provider SHOULD have a security concept for its services. For individual outsourcing projects, it SHOULD also establish specific security concepts based on the respective outsourcing customers' security requirements. Common security objectives SHOULD be developed between outsourcing service providers and their customers. A common classification for all sensitive information SHOULD also be established. Regular checks SHOULD be performed to ensure that the applicable security concepts are implemented.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information