Shared Service Providers

Formal document that provides an overview of the security requirements for an information system and describes the security controls in place or planned for meeting those requirements.