May 3, 2016 at 5:16 pm
#738
elisha
Participant
2.2.1 – I’m not sure what this means “Management to contract terms and oversight of vendor; ”
3.1 – It might be a good idea to reference the Data Center standard here as it relates to hosting and security/availability tier.
Under 3.2.2 “Provide annual training for employees;” –where is the training and support responsibility boundary between IT and departments?