Requirement
In addition to Subcontrols in the ECC control 1-9-3, the following requirements should be covered prior the professional relationship of staff with the CST shall cover, at a minimum:
Sub-Controls
1-4-T-1-1
Requirement: Screening or vetting candidates of personnel with access to Cloud Service sensitive functions (Key Management, Service Administration, Access Control).
References
- ECC – 2:2024 equivalent: 1-9-3
