Entity maintains a list of all contractual obligations based on customer contracts
Entity ensures that the Disaster Recovery Plan is tested periodically and learnings documented
A clear desk policy for papers and removable storage media and a clear screen policy for information processing facilities shall be adopted.
Entity ensures that Subject Access Requests are being honoured in accordance with the Privacy Policy
Entity conducts Data Protection Impact Assessments periodically in order to assess the regulatory risks associated with processing of personal data
Entity ensures that appropriate remediation measures are in place when personal data is shared with vendors as a part of its processing activities