Annex A 5.23 - Information Security for Use of Cloud Services

Processes for acquisition, use, management and exit from cloud services shall be established in accordance with the organization’s information security requirements.