Under active development Content is continuously updated and improved · Last updated Feb 18, 2026, 2:55 AM UTC

03.16.03.A03.16.03.A

>Control Description

Require the providers of external system services used for the processing, storage, or transmission of CI to comply with the following security requirements: organization-defined security requirements.

>Cross-Framework Mappings

Ask AI

Configure your API key to use AI features.