What is a sub-processor?
A sub-processor is a third-party data processor engaged by IBM Security Guardium Insights for IBM Cloud Pak for Security. The sub-processor has or potentially will get access to personal data that IBM Security Guardium Insights for IBM Cloud Pak for Security processes on behalf of its customers.
Why and how should I assess this?
If you choose to use IBM Security Guardium Insights for IBM Cloud Pak for Security as a processor, the sub-processors listed will have access to personal data processed on your behalf. When you assess the sub-processors of your vendors, you need to ensure the following:
A signed data processing agreement
You need to have a signed contract in place that commits IBM Security Guardium Insights for IBM Cloud Pak for Security to only use sub-processors with your permission.
Transfers of data out of Europe
If IBM Security Guardium Insights for IBM Cloud Pak for Security uses a sub-processor located outside Europe, there must be a legal basis for the transfer.