QuestionQ539

Information Security Governance

What is the information security manager’s role in completing contract negotiations with service providers?

  • A To perform a risk analysis on the outsourcing process
  • B To obtain a security standard certification from the provider
  • C To update security standards for the outsourced process
  • D To ensure that clauses for periodic audits are included
Explanation

Service-provider contracts should include clauses that permit periodic audits, enabling the organization to assess the provider’s continued compliance with contractual security requirements and control expectations.

Community Discussion

No comments yet. Be the first to start the discussion!