South Korea ISMS-P 2.3.4: Security at third-party contract change or end
What does 2.3.4 require?
On contract expiry, work completion or staff change, assets are returned, system accounts deleted, confidentiality undertakings obtained, and any important or personal information held by the outsider is identified and returned or destroyed under a formal procedure.
Maintained by Gerard Blokdyk·Verified against the published standard ·Control text last updated
Other controls in 2.3 External party security – South Korea ISMS-P