CGEIT: Certified in the Governance of Enterprise IT

By Isaca · Question Mode

QuestionQ12

VerifiedRisk Optimization

A regional business unit of a major financial institution is evaluating the use of a Software as a Service (SaaS) cloud vendor to implement a new system. Which of the following should be completed FIRST?

Explanation

A business case establishes the business need, expected value, costs, risks, and justification for the proposed SaaS implementation. Vendor security due diligence and any policy updates should follow once the initiative is justified and approved.

Community Discussion

No comments yet. Be the first to start the discussion!