+Identification of applicable legal, regulatory, self-imposed or contractual requirements

Identification of applicable legal, regulatory, self-imposed or contractual requirements

The legal, regulatory, self-imposed and contractual requirements relevant to the information security of the cloud service as well as the Cloud Service Provider's procedures for complying with these requirements are explicitly defined and documented.
Additonal Criteria-
Supplementary Information - About the CriteriaThe Cloud Service Provider's documentation may refer to the following requirements, among others:
• Requirements for the protection of personal data (e.g. EU General Data Protection Regulation);
• Compliance requirements based on contractual obligations with cloud customers (e.g. ISO/IEC 27001, SOC 2, PCI-DSS);
• generally accepted accounting principles (e.g. in accordance with HGB or IFRS);
• Requirements regarding access to data and auditability of digital documents (e.g. according to GDPdU); and
• Other laws (e.g. according to BSIG or AktG).

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje