CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ748

Risk Response and Reporting

Which of the following is the BEST method for ensuring that outsourced service providers comply with the enterprise information security policy?

  • A Penetration testing
  • B Service level monitoring
  • C Security awareness training
  • D Periodic audits
Explanation

Periodic audits independently examine a provider’s controls, records, and practices to determine whether they comply with established security policies and procedures. This directly verifies policy compliance by outsourced providers.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!