CLD-14
Prohibition On Unverified Hosted Assets, Applications & Services
Description
Mechanisms exist to prohibit access to, or usage of, hosted Technology Assets, Applications and/or Services (TAAS) until applicable cybersecurity and data protection control implementation is verified.
Control Question
Does the organization prohibit access to, or usage of, hosted Technology Assets, Applications and/or Services (TAAS) until applicable cybersecurity and data protection control implementation is verified?
Control Metadata
Domain:
Cloud Security
Validation Cadence:
Annual