SEA-02.2 - Outsourcing Non-Essential Functions or Services

Mechanisms exist to identify non-essential functions or services that are capable of being outsourced to external service providers and align with the organization's enterprise architecture and security standards.