DCH-13
Use of External Technology Assets, Applications and/or Services (TAAS)
Description
Mechanisms exist to govern how external parties, including Technology Assets, Applications and/or Services (TAAS), are used to securely store, process and transmit data.
Control Question
Does the organization govern how external parties, including Technology Assets, Applications and/or Services (TAAS), are used to securely store, process and transmit data?
Control Metadata
Domain:
Data Classification & Handling
Validation Cadence:
Annual