COM-03.01AC

Based on a risk assessment (cf. OIS-07) and technical feasibility, the cloud service provider decides to which extent internal audits are supplemented by procedures to automatically monitor applicable requirements of policies and procedures with regard to the following aspects:

1. Configuration of system components to provide the cloud service within the cloud service provider's area of responsibility;

2. Performance and availability of these system components;

3. Response time to incidents and security incidents; and

4. Recovery time (time to completion of error handling).

1. Översikt

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

3. Relaterade regleringar

Länkade ärenden

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)