Exactly where a sub-processor is engaged, the exact same data security obligations during the agreement concerning the controller and processor need to be imposed within the sub-processor by way of agreement or other “organisational measures.”[45] The processor will stay totally liable to the controller for performance from the sub-processor’s obligations. https://cybersecurityconsultinginusa.blogspot.com/2024/08/aramco-cyber-security-certificate-in.html