Central Bank of Jordan Cloud Computing Guideline (2018)
2.5: Contracts, agreements and the cloud service level agreement – Central Bank of Jordan Cloud Computing Guideline (2018)

Central Bank of Jordan Cloud Computing Guideline (2018) 2.5.2: Contracts protect data ownership, require consent to material changes and fix data locations

What does 2.5.2 require?

Contracts keep information confidential and secure and preserve the company's ownership of its data, with measures that stop any other person or party viewing or reaching the data without prior consent; oblige the provider to inform the company of any proposed vital change to the contract or the contracted services that might affect its ability to meet its responsibilities and to obtain the company's approval, with a notice period agreed in advance so the company can assess and test the change beforehand; identify the geographical location of the sites storing the company's data and require the company's approval before the provider changes workplaces, data centres or operations related to the assigned services; and set the security and operational requirements that keep security policies and practices effective, including the exceptional circumstances in which either party may alter them.

Maintained by Gerard Blokdyk

Other controls in 2.5: Contracts, agreements and the cloud service level agreement – Central Bank of Jordan Cloud Computing Guideline (2018)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.