Where a sub-processor is engaged, a similar info security obligations within the agreement between the controller and processor need to be imposed around the sub-processor By means of agreement or other “organisational steps.”[45] The processor will continue to be thoroughly liable towards the controller for performance on the sub-processor’s obligations. https://icelisting.com/story18707965/cyber-security-services-in-usa