CISM: Certified Information Security ManagerDemo

Question

Which of the following offers the BEST assurance that a contracted third-party provider fulfills an organization's security requirements?

A Continuous monitoring
B Due diligence questionnaires
C Right-to-audit clause in the contract
D Performance metrics

Explanation

A right-to-audit clause contractually permits the organization to assess the third party’s security controls and validate compliance with its requirements. This provides stronger assurance than self-attested questionnaires or operational metrics.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ1161

Community Discussion