SSO-03—Directory of service providers and suppliers
>Control Description
The Cloud Service Provider maintains a directory for controlling and monitoring the service providers and suppliers who contribute services to the delivery of the cloud service. The following information is maintained in the directory:
• Company name;
• Address;
• Locations of data processing and storage;
• Responsible contact person at the service provider/supplier;
• Responsible contact person at the cloud service provider;
• Description of the service;
• Classification based on the risk assessment;
• Beginning of service usage; and
• Proof of compliance with contractually agreed requirements.
The information in the list is checked at least annually for completeness, accuracy and validity.
Additional criteria: -
Ask AI
Configure your API key to use AI features.