+OPS.2.1.A1 Specification of Security Requirements for Outsourcing Projects (B)

OPS.2.1.A1 Specification of Security Requirements for Outsourcing Projects (B)

All the security requirements for an outsourcing project MUST be defined on the basis of an outsourcing strategy. Both outsourcing parties MUST contractually commit to comply with IT-Grundschutz or a comparable level of protection. All interfaces between the outsourcing service provider and the outsourcing customer MUST be identified and corresponding security requirements defined in this regard. The security requirements MUST specify the authorisations (e.g. site, system, and data access rights) that the two parties are to grant to one another.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.29 Violations of Laws or Regulations