TPM-04
Third-Party Services
Description
Mechanisms exist to mitigate the risks associated with third-party access to the organization's Technology Assets, Applications, Services and/or Data (TAASD).
Control Question
Does the organization mitigate the risks associated with third-party access to its Technology Assets, Applications, Services and/or Data (TAASD)?
Control Metadata
Domain:
Third-Party Management
Validation Cadence:
Annual
Evidence Request List:
E-CPL-06