|
+Interfaces and Dependencies |
Interfaces and DependenciesInterfaces and dependencies between cloud service delivery activities performed by the Cloud Service Provider and activities performed by third parties are documented and communicated. This includes dealing with the following events:• Vulnerabilities; • Security incidents; and • Malfunctions. The type and scope of the documentation is geared towards the information requirements of the subject matter experts of the affected organisations in order to carry out the activities appropriately (e.g. definition of roles and responsibilities in guidelines, description of cooperation obligations in service descriptions and contracts). The communication of changes to the interfaces and dependencies takes place in a timely manner so that the affected organisations and third parties can react appropriately with organisational and technical measures before the changes take effect. Additonal Criteria- Supplementary Information - About the CriteriaThe Cloud Service Provider can define and document the interfaces and dependencies described in the basic criterion in guidelines and instructions. For example, Cloud customers' obligations to cooperate should be described in service descriptions and contracts. Third parties in the sense of this basic criterion are, e.g. cloud customers and sub-service providers. 1. Forbhreathnú
1.1 Tagairtí1.2 Ceanglais aitheanta1.3 Rialacháin ghaolmhara2. Ceanglais aitheanta
3. Rialacháin ghaolmhara
|