Control: ism-1737; Revision: 1; Updated: Sep-22; Applicability: ALL; Essential Eight: N/A ​

A managed service register contains the following for each managed service:

• managed service provider’s name
• managed service’s name
• purpose for using the managed service
• sensitivity or classification of data involved
• due date for the next security assessment of the managed service
• contractual arrangements for the managed service
• point of contact for users of the managed service
• 24/7 contact details for the managed service provider.