CLD-09
Geolocation Requirements for Processing, Storage and Service Locations
Description
Mechanisms exist to control the location of cloud processing/storage based on business requirements that includes statutory, regulatory and contractual obligations.
Control Question
Does the organization control the location of cloud processing/storage based on business requirements that includes statutory, regulatory and contractual obligations?
Control Metadata
Domain:
Cloud Security
Validation Cadence:
Semi-Annual
Evidence Request List:
E-AST-06 E-AST-23