Where by a sub-processor is engaged, the identical information defense obligations during the agreement in between the controller and processor need to be imposed about the sub-processor by way of agreement or other “organisational measures.”[45] The processor will stay completely liable towards the controller for performance on the sub-processor’s obligations. https://socialimarketing.com/story3091472/cyber-security-consulting-in-saudi-arabia