+APP.3.2.A10 Selecting an Appropriate Web Host (S)

APP.3.2.A10 Selecting an Appropriate Web Host (S)

If an organisation opts to use an external webhosting provider instead of operating its web server itself, the organisation SHOULD pay attention to the following points when selecting a suitable provider:

  • The manner in which the services are to be rendered SHOULD be contractually agreed. Security aspects SHOULD be included in writing in a service level agreement (SLA) as part of the contract.
  • The service provider SHOULD regularly check and service the IT systems used. The service provider SHOULD be obligated to respond promptly in case of technical problems or compromised customer systems.
  • The service provider SHOULD implement basic technical and organisational safeguards to protect its information domain.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.11 Failure or Disruption of Service Providers
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.29 Violations of Laws or Regulations