Back

Include required service levels in system acquisition contracts.


CONTROL ID
11652
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Include security requirements in system acquisition contracts., CC ID: 01124

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Outsourced service providers should ensure they can offer remote or fully manned services on a 24x7 basis, support prevailing software and hardware platforms of key industry vendors, provide lists of software and hardware that corresponds to the subscribed services, and communicate details of hardwa… (ยง 7.8, ISO 24762 Information technology - Security techniques - Guidelines for information and communications technology disaster recovery services, 2008)