Where a sub-processor is engaged, a similar facts defense obligations inside the deal in between the controller and processor should be imposed about the sub-processor By the use of contract or other “organisational steps.”[forty five] The processor will remain totally liable to your controller for performance of the sub-processor’s obligations. https://cybersecurityriskmanagementinusa.blogspot.com/