Control: ism-1638; Revision: 3; Updated: Sep-22; Applicability: ALL; Essential Eight: N/A ​

An outsourced cloud service register contains the following for each outsourced cloud service:

• cloud service provider’s name
• cloud service’s name
• purpose for using the cloud service
• sensitivity or classification of data involved
• due date for the next security assessment of the cloud service
• contractual arrangements for the cloud service
• point of contact for users of the cloud service
• 24/7 contact details for the cloud service provider.