+Information on certifications or attestations

Information on certifications or attestations

In the system description, the Cloud Service Provider provides comprehensible and transparent information on existing and valid certifications or attestations by independent third parties relating to the following aspects of the cloud service:
  • compliance of the management systems for information security, business continuity and quality with applicable international standards;
  • compliance with the European General Data Protection Regulation (GDPR);
  • the suitability and effectiveness of the internal control system in relation to the applicable criteria; and
  • certifications or attestations according to industry-specific requirements of cloud customers.
To the extent applicable for the certification or attestation, the following information are provided:
  • date of issuance;
  • issuing organisation; and
  • date or period of validity or coverage.
The scope of the information corresponds to the needs of the subject matter experts of the Cloud customers who define specifications on information security, implement these or validate their implementation and assess the suitability of the cloud service from a legal and regulatory point of view (e.g. IT, compliance, internal audit).
Transparency can be additionally increased by disclosing SLAs based on ISO/IEC 19086 or comparable standards.
Fulfilment of the General Condition does not require the Cloud Service Provider to hold a certification or attestation for all listed aspects.

1. Επισκόπηση

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

Απαιτήσεις

3. Σχετικοί κανονισμοί

Κανονισμοί