Purpose: A number of organisations outsource their information systems and information technology infrastructure to a type of organisation called a “service organisation”. In the current business environment, where cyber risks are increasing, it is important to have a mechanism to ensure...