+OPS.2.2.A9 Contractual Arrangements with the Cloud Service Provider [Top Management] (S)
|
OPS.2.2.A9 Contractual Arrangements with the Cloud Service Provider [Top Management] (S)
The contractual provisions between cloud customers and cloud service providers SHOULD be adapted in terms of their type, scope, and level of detail to the protection needs of the information to be used in the cloud. The location in which the cloud service provider renders its services SHOULD be specified. In addition, escalation levels and communication channels SHOULD be defined between a given organisation and its cloud service provider. The manner in which the organisation's data should be securely deleted SHOULD also be agreed. Termination provisions SHOULD also be established in writing. Cloud service providers SHOULD disclose all the subcontractors they require to provide their service.
1. Overview
1.1 References
1.2 Identified Requirements
1.3 Related Regulations
2. Identified Requirements
Requirements
| Source |
Requirement |
3. Related Regulations
Regulations
| Source |
Regulation |
Linked Issues
|