[Autogenerated] If you are a service provider,
there's a separate and almost mirror requirement,
which is 12.9 that applies to you.
So 12.9 only applies to service.
Providers on this requirement basically says that a service provider has
to help its customers complied with Requirement 12.8 by providing that
written acknowledgement that acknowledgement that they take responsibility
for the security of cardholder data,
which matches the organization's requirement in 12.8 point two the U.
S.
A.
Is going to validate this by looking at the service providers templates on
perhaps some sample contracts to see how they provide.
This written acknowledgement that wraps up this module on
third-party service providers is just to requirements.
But because of the way the organizations now typically structure their business,
it's actually one of the most important requirements.
So let's hear from QoS Jacob and sorry about how he assesses these requirements