+SOV-4-05-C

SOV-4-05-C

All software updates and operational data affecting the cloud service MUST be received, authorized and validated in a secured network area managed and controlled by the cloud service provider.

The cloud service provider MUST verify and check updates for known vulnerabilities.

Updates MUST include documentation satisfying the needs of the cloud service provider.

The update process MUST be based on a controlled change management processes.

1. Översikt

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

Krav

3. Relaterade regleringar

Regleringar