Please enable JavaScript.

Coggle requires JavaScript to display documents.

1.10.2 (2) 2.10.2 3.10.2 (outsourcing (SLAs (for quality purposes and…

- - - - Quality of service,
      - guarantees of continuity of service,
      - control procedures,
      - competitive advantage
      - and technical knowledge
  - - - • Legal, regulatory and tax issues—Operating in a different country or region may introduce new risk about which the organization may have limited knowledge.
      - • Continuity of operations—Business continuity and disaster recovery may not be adequately provided for and tested.
      - • Personnel—Needed modifications to personnel policies may not be considered.
      - • Telecommunication issues—Network controls and access from remote or offshore locations may be subject to more frequent outages or a larger number of security exposures.
      - • Cross-border and cross-cultural issues—Managing people and processes across multiple time zones, languages and cultures may present unplanned challenges and problems.
        
        Cross-border data flow may also be subject to legislative requirements (e.g., that data must be encrypted during transmission).
      - • Planned globalization and/or important expansion
- - - - SOC 1: Report on the service organization’s system controls likely to be RELEVANT TO USER ENTITY'S CONTROL OVER FINANCIAL REPORTING
      - – SOC 2: Report on the service organization’s system controls Relevant to security, availability, processing integrity, confidentiality or privacy, including the organization’s compliance with its privacy practices
      - – SOC 3: Similar to a SOC 2 report, but does not include the detailed understanding of the design of controls and the tests performed by the service auditor
- - - - Additionally, processes detailing the way information is stored, archived and backed up will need revisiting.
  - - - Sufficient technical skills and resources should be made available to monitor whether requirements of the agreement, in particular the information security requirements, are being met.
    - - through a clearly defined reporting process, format and structure.