+Identification of applicable legal, regulatory, self-imposed or contractual requirements

Identification of applicable legal, regulatory, self-imposed or contractual requirements

The legal, regulatory, self-imposed and contractual requirements relevant to the information security of the cloud service as well as the Cloud Service Provider's procedures for complying with these requirements are explicitly defined and documented.
Additonal Criteria-
Supplementary Information - About the CriteriaThe Cloud Service Provider's documentation may refer to the following requirements, among others:
• Requirements for the protection of personal data (e.g. EU General Data Protection Regulation);
• Compliance requirements based on contractual obligations with cloud customers (e.g. ISO/IEC 27001, SOC 2, PCI-DSS);
• generally accepted accounting principles (e.g. in accordance with HGB or IFRS);
• Requirements regarding access to data and auditability of digital documents (e.g. according to GDPdU); and
• Other laws (e.g. according to BSIG or AktG).

1. Overzicht

1.1 Referenties

1.2 Geïdentificeerde eisen

1.3 Gerelateerde regelingen

2. Geïdentificeerde eisen

Eisen

3. Gerelateerde regelingen

Regelingen