South Korea ISMS-P 2.3.3: Monitoring third-party security
What does 2.3.3 require?
Compliance of outsiders with contractual and policy requirements is checked or audited periodically, improvement plans are made for issues found, and processors must obtain the controller's consent before sub-outsourcing personal information processing.
Maintained by Gerard Blokdyk·Verified against the published standard ·Control text last updated
Other controls in 2.3 External party security – South Korea ISMS-P