In which a sub-processor is engaged, the same info protection obligations within the deal concerning the controller and processor need to be imposed about the sub-processor by way of agreement or other “organisational steps.”[45] The processor will continue being totally liable into the controller for performance in the sub-processor’s obligations. https://webapplicationsecuritytestingusa.blogspot.com/2024/08/aramco-cyber-security-certificate-in.html