CTPS 4.1 Cross-cutting requirement
CTPS 4.1.1R
1A critical third party must have in place sound, effective and comprehensive strategies, controls, processes and systems that enable it to comply with the rules in CTPS.
CTPS 4.1.2R
1The strategies, processes and systems required by CTPS 4.1.1R must be proportionate to the nature, scale and complexity of the critical third party’s activities.