Data security doesn’t stop at your doors; it also applies to your vendors, service providers. So organizations at the Intermediate level need to scrutinize the practices of their third-party contractors as thoroughly as they scrutinize their own.
Key points:
Cloud vendors meet the same legal and regulatory compliance requirements that the business applies to traditional, on premises hosting.
A clear cloud assurance policy has been developed and incorporated as part of all cloud vendor contracts.
Read more:
Policy background, how is done: Immediate steps, Documenting and Implementing the policy: The Power of Digital Policy book, page: