In Which a sub-processor is engaged, a similar information security obligations inside the agreement between the controller and processor have to be imposed on the sub-processor By the use of agreement or other “organisational steps.”[45] The processor will remain completely liable for the controller for performance in the sub-processor’s obligations. https://socialimarketing.com/story3091472/cyber-security-consulting-in-saudi-arabia