• The potential CSP’s security and service commitments meet client SLA
requirements.
• Key cloud legal issues are detailed to the client’s satisfaction in the CSP’s contract
or SLA.
• The CSP will allow the cloud client the right to audit the CSP’s operations on a
regular basis to verify that security controls are in place and effective.