No Technology Service Provider Minimum Requirements Yes/ No The IT services company organisation must have had a minimum of 5 years’ company Yes/No trading experience The IT services company must have existing clients who they are delivering service Yes/No management of cloud based big data solutions for. The IT services company must have existing clients for whom they are delivering service Yes/No management of dev/ops solutions. The IT Services company must have existing clients who they are delivering service Yes/No management of public cloud hosted solutions. No Platform as a Service” Minimum Security Requirements Yes/ No “Data The IT Service company must have an information security policy and/or data privacy Yes/No policy and/or another policy covering the services that you will be delivering to EBRD? The IT Service company must have a security policy that addresses the secure handling Yes/No of sensitive and/or confidential/restricted data, whether that data is commercial or personal data. The IT Service company must have procedures to safeguard EBRD data that may be Yes/No transferred from EBRD to your organisation, including data transferred overseas. The IT Service company must have controls, physical and logical, to prevent access to Yes/No EBRD data, including backups and test systems. The IT Service company must provide staff with training to ensure that they are fully Yes/No aware of how to handle sensitive data securely. The IT Service company staff/supplier contracts or terms and conditions must Yes/No specifically mention information security and data privacy responsibilities with respect to sensitive data. The IT Service company must have a policy for the procedures and processes to deal Yes/No with allocation and revocation of user privileges relating to access to EBRD data. No Minimum Contractual Terms Yes/ No
No Technology Service Provider Minimum Requirements Yes/ No The IT services company organisation must have had a minimum of 5 years’ company trading experience Yes/No The IT services company must have existing clients who they are delivering service management of cloud based big data solutions for. Yes/No The IT services company must have existing clients for whom they are delivering service management of dev/ops solutions. Yes/No The IT Services company must have existing clients who they are delivering service management of public cloud hosted solutions. Yes/No No “Data Platform as a Service” Minimum Security Requirements Yes/ No The IT Service company must have an information security policy and/or data privacy policy and/or another policy covering the services that you will be delivering to EBRD? Yes/No The IT Service company must have a security policy that addresses the secure handling of sensitive and/or confidential/restricted data, whether that data is commercial or personal data. Yes/No The IT Service company must have procedures to safeguard EBRD data that may be transferred from EBRD to your organisation, including data transferred overseas. Yes/No The IT Service company must have controls, physical and logical, to prevent access to EBRD data, including backups and test systems. Yes/No The IT Service company must provide staff with training to ensure that they are fully aware of how to handle sensitive data securely. Yes/No The IT Service company staff/supplier contracts or terms and conditions must specifically mention information security and data privacy responsibilities with respect to sensitive data. Yes/No The IT Service company must have a policy for the procedures and processes to deal with allocation and revocation of user privileges relating to access to EBRD data. Yes/No No Minimum Contractual Terms Yes/ No