Central Bank of Jordan Cloud Computing Guideline (2018) 2.3.2: Policy sets data handling, security controls, provider assessment standards and expected outcomes

What does 2.3.2 require?

The policy sets how the company archives, disposes of, processes and transfers data within the provider's systems, including where that data is stored; the security controls to be followed with any cloud provider; the standards for assessing and performing due diligence on a provider before any agreement; and the requirements and results expected from using the provider in light of the business environment and its changes.