External System Services

Require that providers of external system services comply with organizational security and privacy requirements and employ the following controls: [parameter];