Bank of Mauritius Guideline on Use of Cloud Services (2022) 6.1: Use a written agreement that secures access to cloud-held information for the institution and the Bank

What does 6.1 require?

The institution does not take up a cloud service without a written agreement with the provider, and every agreement carries appropriate clauses on access by the institution and by the Bank to information stored on the cloud. A foreign bank's local subsidiary or branch may rely on the parent's master agreement provided a local addendum is attached.