Outsourcing Policy

The result of the risk assessment shall be presented to management for approval prior to signing the outsourcing contract. Management shall decide if will benefit overall by outsourcing the function to the outsourcer, taking into account both the commercial and information security aspects. ................
................