Wherever a sub-processor is engaged, precisely the same knowledge defense obligations within the contract concerning the controller and processor needs to be imposed on the sub-processor Through agreement or other “organisational measures.”[forty five] The processor will continue to be completely liable towards the controller for performance of the sub-processor’s obligations. https://cybersecurityinriskmanagement.blogspot.com/