An outsourced cloud service register contains the following for each outsourced cloud service:
- cloud service provider’s name
- cloud service’s name
- purpose for using the cloud service
- sensitivity or classification of data involved
- due date for the next security assessment of the cloud service
- contractual arrangements for the cloud service
- point of contact for users of the cloud service
- 24/7 contact details for the cloud service provider.