December 2010
Beginner
72 pages
58m
English
‘The average {large} company has US$12 million worth of sensitive information residing abroad.’McAfee, 200925
In today’s complex and challenging world, few companies can do everything themselves. Most need to focus where they excel, and call on outside expertise to get other tasks done. If the outsourcing contractor needs access to sensitive or personal data, you need to consider the security awareness of its staff, as well as your own. It is important, therefore, to assess the contractor’s security policies, processes and culture, as an integral part of selection procedures.
The sample security policy on outsourcing drafted by the ISO27k Implementers’ Forum, makes it clear what companies should expect26:
Read now
Unlock full access