12.8.1 Maintain a list of service providers including a description of the service provided.
12.8.1 Verify that a list of service providers is maintained and includes a description of the service provided.
Keeping track of all service providers identifies where potential risk extends to outside of the organization.