+Review and Approval of Policies and Instructions

Review and Approval of Policies and Instructions

Information security policies and instructions are reviewed at least annually for adequacy by the Cloud Service Provider's subject matter experts.
The review shall consider at least the following aspects:
• Organisational and technical changes in the procedures for providing the cloud service; and
• Legal and regulatory changes in the Cloud Service Provider's environment.
Revised policies and instructions are approved before they become effective.
Additonal Criteria-
Supplementary Information - About the Criteria-

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations