12.8.1 Maintain a list of service providers. 12.8.1 Verify that a list of service providers is maintained. Keeping track of all service providers identifies where potential risk extends to outside of the organization.
