Control: ism-1395; Revision: 7; Updated: Dec-22; Applicability: ALL; Essential Eight: N/A ​

Service providers, including any subcontractors, provide an appropriate level of protection for any data entrusted to them or their services.