Should mention:
- The security requirement aligns with the risk mitigation for outsourcing process.(Refer Security Risk Assessment)
- The minimum security requirement aligns with GISG security requirement for external parties.
- Right of TLT to have regularly security and confidentiality audit to vendor site with fully support from vendor
- - Any finding during audit, It’s right of TLT to terminate the contract if vendor doesn’t take action to fix.