Back

Provide products or services per customer requests.


CONTROL ID
08893
CONTROL TYPE
Business Processes
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS




This Control directly supports the implied Control(s):
  • Establish, implement, and maintain a chain of custody or traceability system over the entire supply chain., CC ID: 08878

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




  • Upon request of the cloud customer, the cloud provider offers customer- specific logging (in terms of the scope and duration of the storage) and makes it available to the customer. Depending on the protection requirements and technical feasibility, the logged data and the user data should be separat… (Section 5.6 RB-13 Description of additional requirements (confidentiality) ¶ 1, Cloud Computing Compliance Controls Catalogue (C5))
  • Bullion banks should provide gold in accordance with customer requests for specific refiners. (Supplement on Gold Step 1: § II.D.2, OECD Due Diligence Guidance for Responsible Supply Chains of Minerals from Conflict-Affected and High-Risk Areas, Second Edition)
  • The organization and the customer shall agree the services to be delivered. (§ 8.3.3 ¶ 1, ISO/IEC 20000-1:2018, Information technology — Service management —Part 1: Service management system requirements, Third Edition)
  • Provide a product or service specifically requested by a consumer or the parent or guardian of a child, perform a contract to which the consumer is a party, or take steps at the request of the consumer prior to entering into a contract; (§ 6-1-1304 (3)(a)(VIII), Colorado Revised Statutes, Title 6, Article 1, Part 13, Colorado Privacy Act)
  • provide a product or service specifically requested by a consumer; (§ 10 (a)(5), Connecticut Public Act No. 22-15, An Act Concerning Personal Data Privacy and Online Monitoring)
  • provide a product or service specifically requested by a consumer; (§ 10 (a)(5), Connecticut Public Act No. 22-15, An Act Concerning Personal Data Privacy and Online Monitoring)
  • Provide a product or service specifically requested by a consumer. (§ 12D-110.(a)(5), Delaware Code, Title 6, Subtitle II, Chapter 12D. Delaware Personal Data Privacy Act)
  • Provide a product or service specifically requested by a consumer. (§ 12D-110.(a)(5), Delaware Code, Title 6, Subtitle II, Chapter 12D. Delaware Personal Data Privacy Act)
  • Provide a product or service specifically requested by a consumer or the parent or guardian of a child, perform a contract to which the consumer is a party, including fulfilling the terms of a written warranty, or take steps at the request of the consumer before entering into a contract. (§ 501.716(1)(d), Florida Statutes, Title XXXIII, Chapter 501, Sections 701-721, Florida Digital Bill of Rights)
  • Provide a product or service specifically requested by a consumer or the parent or guardian of a child, perform a contract to which the consumer is a party, including fulfilling the terms of a written warranty, or take steps at the request of the consumer before entering into a contract. (§ 501.716(1)(d), Florida Statutes, Title XXXIII, Chapter 501, Sections 701-721, Florida Digital Bill of Rights)
  • Provide a product or service specifically requested by a consumer, perform a contract to which the consumer, or a parent of a child, is a party, including fulfilling the terms of a written warranty, or take steps at the request of the consumer or parent before entering into a contract. (IC 24-15-8-1(a)(5), Indiana Code, Title 24, Article 15, Consumer Data Protection)
  • Provide a product or service specifically requested by a consumer, perform a contract to which the consumer, or a parent of a child, is a party, including fulfilling the terms of a written warranty, or take steps at the request of the consumer or parent before entering into a contract. (IC 24-15-8-1(a)(5), Indiana Code, Title 24, Article 15, Consumer Data Protection)
  • Provide a product or service specifically requested by a consumer or parent or guardian of a child, perform a contract to which the consumer or parent or guardian of a child is a party, including fulfilling the terms of a written warranty, or take steps at the request of the consumer or parent or gu… (§ 715D.7.1.e., Iowa Code Annotated, Section 715D, An Act Relating to Consumer Data Protection, Providing Civil Penalties, and Including Effective Date Provisions)
  • Provide a product or service specifically requested by a consumer or parent or guardian of a child, perform a contract to which the consumer or parent or guardian of a child is a party, including fulfilling the terms of a written warranty, or take steps at the request of the consumer or parent or gu… (§ 715D.7.1.e., Iowa Code Annotated, Section 715D, An Act Relating to Consumer Data Protection, Providing Civil Penalties, and Including Effective Date Provisions)
  • provide a product or service specifically requested by a consumer; (§ Section 11. (1)(e), Montana Consumer Data Privacy Act)
  • provide a product or service specifically requested by a consumer; (§ Section 11. (1)(e), Montana Consumer Data Privacy Act 2023)
  • Provide a product or service specifically requested by a consumer; (§ 507-H:10 I.(e), New Hampshire Statutes, Title LII, Chapter 507-H, Expectation of Privacy)
  • Providing a product or service that a consumer specifically requests from the controller or processor or requests as the parent or guardian of a child on the child's behalf or as the guardian or conservator of a person subject to a guardianship, conservatorship or other protective arrangement on the… (Section 2 (3)(g), 82nd Oregon Legislative Assembly, Senate Bill 619)
  • Provide a product or service specifically requested by a consumer or the parent or legal guardian of a known child, perform a contract to which the consumer is a party, including fulfilling the terms of a written warranty, or take steps at the request of the consumer prior to entering into a contrac… (§ 47-18-3208.(a)(5), Tennessee Code Annotated, Title 47, Chapter 18, Parts 3201 through 3213, Tennessee Information Protection Act)
  • Provide a product or service specifically requested by a consumer or the parent or legal guardian of a known child, perform a contract to which the consumer is a party, including fulfilling the terms of a written warranty, or take steps at the request of the consumer prior to entering into a contrac… (§ 47-18-3208.(a)(5), Tennessee Code Annotated, Title 47, Chapter 18, Parts 3201 through 3213, Tennessee Information Protection Act)
  • provide a product or service specifically requested by a consumer or the parent or guardian of a child, perform a contract to which the consumer is a party, including fulfilling the terms of a written warranty, or take steps at the request of the consumer before entering into a contract; (§ 541.201 (a)(4), Texas Business and Commercial Code, Title 11, Subtitle C, Chapter 541, Subchapter A, Section 541)
  • provide a product or service requested by a consumer or a parent or legal guardian of a child; (13-61-304 (1)(e), Utah Code, Title 13, Chapter 61, Utah Consumer Privacy Act)
  • provide a product or service requested by a consumer or a parent or legal guardian of a child; (13-61-304 (1)(e), Utah Code, Title 13, Chapter 61, Utah Consumer Privacy Act)
  • Provide a product or service specifically requested by a consumer, perform a contract to which the consumer is a party, including fulfilling the terms of a written warranty, or take steps at the request of the consumer prior to entering into a contract; (§ 59.1-582.A.5., Code of Virginia Title 59.1, Chapter 53, Consumer Data Protection Act)
  • Provide a product or service specifically requested by a consumer, perform a contract to which the consumer is a party, including fulfilling the terms of a written warranty, or take steps at the request of the consumer prior to entering into a contract; (§ 59.1-582.A.5., Code of Virginia Title 59.1, Chapter 53, Consumer Data Protection Act, April 11, 2022)