Citation Audit

Citation: Article 18 2. ¶ 3 – For each outsourced task, the obliged entity shall be able to demonstrate to the supervisor that it understands the rationale behind the activities carried out by the service provider and the approach followed in their implementation, and that such activities mitigate the specific risks to which the obliged entity is exposed.

Control: CC ID 12481 – Include the services provided by each supplier in the Third Party Service Provider list.