Wherever A sub-processor is engaged, exactly the same information defense obligations from the agreement amongst the controller and processor need to be imposed to the sub-processor By the use of contract or other “organisational steps.”[45] The processor will remain fully liable on the controller for performance with the sub-processor’s obligations. https://bookmarkextent.com/story19195681/cyber-security-services-in-usa