Where a sub-processor is engaged, exactly the same information security obligations from the agreement involving the controller and processor need to be imposed to the sub-processor By means of deal or other “organisational actions.”[45] The processor will continue being entirely liable for the controller for performance with the sub-processor’s obligations. https://orangebookmarks.com/story17722903/cyber-security-consulting-in-saudi-arabia