Back

Plan for selling facilities, technology, or services.


CONTROL ID
06893
CONTROL TYPE
Acquisition/Sale of Assets or Services
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Acquisition or sale of facilities, technology, and services, CC ID: 01123

This Control has the following implementation support Control(s):
  • Refrain from providing products and services, as necessary., CC ID: 15580
  • Determine if there is a need for the product or service being sold., CC ID: 06894
  • Establish, implement, and maintain a product or service pricing program., CC ID: 13676
  • Provide identification mechanisms for the organization's supply chain members., CC ID: 12201
  • Establish, implement, and maintain customer terms and conditions., CC ID: 13666
  • Develop product solicitation responses and service solicitation responses., CC ID: 06896
  • Prevent the creation or distribution of devices designed to circumvent security measures., CC ID: 11514
  • Provide a product warranty or service warranty., CC ID: 11601
  • Establish, implement, and maintain equipment shipping procedures., CC ID: 11449
  • Preserve products created for sale prior to shipping., CC ID: 11602


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • A person may acquire or sell an encryption product despite the selected encryption algorithm, the chosen encryption key length, the implementation technique, or the medium used. (§ 90(1)(a), The Electronic Communications and Transactions Act, 2002)
  • A person may acquire or sell any software, including software with encryption capabilities, that is generally available, as is, and designed for installation by the purchaser. (§ 90(1)(b)(i), The Electronic Communications and Transactions Act, 2002)
  • A person may acquire or sell any software, including software with encryption capabilities, that is publicly available, in the public domain, or accessible to the public in any form. (§ 90(1)(b)(ii), The Electronic Communications and Transactions Act, 2002)
  • A person may acquire or sell any software, including software with encryption capabilities, that is a computing device because it uses or incorporates in any form software exempted from any requirement for a validated license. (§ 90(1)(b)(iii), The Electronic Communications and Transactions Act, 2002)
  • The purpose of the supply process is to provide an acquirer with a product or service that meets agreed requirements. (§ 6.1.2.1, ISO 15288-2008 Systems and software engineering - System life cycle processes, R 2008)
  • For services that are to be transferred, the planning shall additionally include the date(s) for the transfer of the services and the activities for the transfer of data, documented information, knowledge and service components. (§ 8.5.2.1 ¶ 3, ISO/IEC 20000-1:2018, Information technology — Service management —Part 1: Service management system requirements, Third Edition)