• The potential CSP’s security and service commitments meet client SLA requirements.
• Key cloud legal issues are detailed to the client’s satisfaction in the CSP’s contract or SLA.
• The CSP will allow the cloud client the right to audit the CSP’s operations on
a regular basis to verify that security controls are in place and effective.