Security & Compliance
Information Security Responsibilities
Security responsibilities should identify who controls each relevant activity and what an actual agreement requires.
Shared duties and service scope
Provider, customer and third-party duties can differ for credentials, user access and submitted data. A shared-responsibility description should avoid shifting obligations by implication. Delegating an activity may not remove the legal responsibility of the relevant party.
Legal concepts and regulatory considerations
Required safeguards and accountability depend on the applicable law and relationship. Actual duties cannot be established by an illustrative checklist.
How this relates to Remizen
This guide creates no new Remizen or customer security duties. It does not claim that particular technical safeguards operate.
Practical review considerations
Key points
- Read actual responsibility provisions and schedules.
- Identify dependencies and unresolved ownership.
- Assess legal and operational responsibilities separately.
Frequently asked questions
Does outsourced work remove all customer responsibility?
Not necessarily. Applicable law and agreements must be examined.