, such as providing the company officer control strictly the service provider’s operation in case of onsite service and providing the company officer control strictly the service provider’s operation in
evaluation of the outsourcee , review of the outsourcee ’s qualifications, and provision associated with the use of services to ensure mitigation of risks from the outsourcee ’s access to the organization’s IT
the internationally-accepted information security standards; 3. measures on IT security, access control, and information disclosure; 4. audit of the cloud provider’s operation by an independent auditor
function under Clause 8 to the following third party without submitting an application for obtaining the approval under Clause 12: (1) a financial institution, or the intermediary ’s affiliated company whose
service provider’s unit and its personnel; (d) contingency management system which specifies procedures and a person in charge in each case clearly. (2) there is no reasonable grounds to believe that the