Division 4.2.4

Where organisers make use of a processor for the development or deployment of the online collection systems or parts thereof, the organisers shall provide documentation to allow the certifying authority to ascertain that the necessary security controls are in place.