QuestionQ2

VerifiedCloud Compliance Program

In a multi-level supply chain structure where cloud service provider A depends on other sub-cloud services, the provider should ensure that any compliance requirements relevant to the provider are:

Explanation

Provider A remains responsible for compliance when its service depends on sub-cloud services. It should pass applicable requirements to the relevant subproviders, typically through contractual obligations, so those requirements are met throughout the supply chain. (tsapps.nist.gov)

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!