external information system service provider

external information system service provider

A provider of external information system services to an organization through a variety of consumer-producer relationships, including but not limited to: joint ventures; business partnerships; outsourcing arrangements (i.e., through contracts, interagency agreements, lines of business arrangements); licensing agreements; and/or supply chain exchanges.

📚 Reference: CNSSI 4009-2015
🏷️ Category: Cybersecurity
📊 Commonality: common