If you’re considering outsourcing functions, services, or capabilities to third parties inside or outside of New Zealand, make sure you understand the value, classification, and risks of the information that suppliers and their sub-contractors will have access to.
Your agency must follow the outsourcing and offshoring Information Security guidelines and policies.