Outsourcing Policy - ISO27k infosec management standards

Management is responsible for designating suitable owners of business processes that are outsourced, overseeing the outsourcing activities and ensuring that this policy is followed. Management is responsible for mandating commercial or security controls to manage the risks arising from outsourcing. ................
................