Control: ism-1572; Revision: 3; Updated: Jun-23; Applicability: ALL; Essential Eight: N/A ​

The regions or availability zones where data will be processed, stored and communicated, as well as a minimum notification period for any configuration changes, is documented in contractual arrangements with service providers.