II.C.20(a) Outsourced Cloud Computing
As with other forms of outsourcing, information security implications are key in the cloud computing model. Management may need to revise information security policies, standards, and procedures to incorporate the activities related to a cloud computing service provider. Refer to the FFIEC's "Outsourced Cloud Computing" statement for more information.See FFIEC, " Outsourced Cloud Computing," July 10, 2012.
II.C.20 Oversight of Third-Party Service Providers
II.C.20(b) Managed Security Service Providers