IS.I.OR.235 Contracting of information security management activities

• Regulation (EU) 2023/203 found in: Information Security (2023/203 and 2022/1645) Part-IS (Jun 2024)

IS.I.OR.235 Contracting of information security management activities Regulation (EU) 2023/203 (a)     The organisation shall ensure that when contracting any part of the activities referred to in point [IS.I.OR.200](#_DxCrossRefBm1193569541) to other organisations, the contracted activities comply with the requirements of this Regulation and the contracted organisation works under its oversight. The organisation shall ensure that the risks associated with the contracted activities are appropriately managed. (b)     The organisation shall ensure that the competent authority can have access upon request to the contracted organisation to determine continued compliance with the applicable requirements laid down in this Regulation. #### IS.I.OR.235 Contracting of information security management activities *Regulation (EU) 2023/203* (a) The organisation shall ensure that when contracting any part of the activities referred to in point [IS.I.OR.200](#_DxCrossRefBm1749084277) to other organisations, the contracted activities comply with the requirements of this Regulation and the contracted organisation works under its oversight. The organisation shall ensure that the risks associated with the contracted activities are appropriately managed. (b) The organisation shall ensure that the competent authority can have access upon request to the contracted organisation to determine continued compliance with the applicable requirements laid down in this Regulation.