+OPS.3.1.A3 Creating a Security Concept for the Outsourcing Project (S)

OPS.3.1.A3 Creating a Security Concept for the Outsourcing Project (S)

An outsourcing service provider SHOULD have a security concept for its services. For individual outsourcing projects, it SHOULD also establish specific security concepts based on the respective outsourcing customers' security requirements. Common security objectives SHOULD be developed between outsourcing service providers and their customers. A common classification for all sensitive information SHOULD also be established. Regular checks SHOULD be performed to ensure that the applicable security concepts are implemented.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information