+OPS.2.1.A5 Establishing an Outsourcing Strategy (S)

OPS.2.1.A5 Establishing an Outsourcing Strategy (S)

A strategy for outsourcing SHOULD be defined. This SHOULD take into account the economic, technical, organisational, and legal framework conditions, as well as the relevant aspects of information security. The business processes, tasks, or applications generally associated with outsourcing SHOULD be clarified. An outsourcing customer SHOULD retain sufficient skills, competencies, and resources to be able to determine and control the information security requirements for each outsourcing project on its own. An outsourcing strategy SHOULD describe the goals, opportunities, and risks of the corresponding outsourcing project.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.11 Failure or Disruption of Service Providers
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.29 Violations of Laws or Regulations