Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)
5.10 and 5.11: System acquisition, development and maintenance; outsourcing security – Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)

Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1) 5.11.1: Analyse security risks before deciding to use outsourced cloud services

What does 5.11.1 require?

All security risks are analysed against the IT security requirements before cloud services hosted at an outsourced data centre are taken up, and the results give management the basis for its decision to proceed.

Maintained by Gerard Blokdyk

Other controls in 5.10 and 5.11: System acquisition, development and maintenance; outsourcing security – Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.