+APP.3.2.A10 Selecting an Appropriate Web Host (S)

APP.3.2.A10 Selecting an Appropriate Web Host (S)

If an organisation opts to use an external webhosting provider instead of operating its web server itself, the organisation SHOULD pay attention to the following points when selecting a suitable provider:

  • The manner in which the services are to be rendered SHOULD be contractually agreed. Security aspects SHOULD be included in writing in a service level agreement (SLA) as part of the contract.
  • The service provider SHOULD regularly check and service the IT systems used. The service provider SHOULD be obligated to respond promptly in case of technical problems or compromised customer systems.
  • The service provider SHOULD implement basic technical and organisational safeguards to protect its information domain.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.11 Failure or Disruption of Service Providers
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.29 Violations of Laws or Regulations