CISSP: Certified Information Systems Security Professional

A hosting facility should be selected based on whether its total risk is acceptable to the organization. Physical protections, disaster-recovery capabilities, and cost contribute to that assessment, but none alone supersedes the overall risk decision. NIST supply-chain risk guidance supports conducting supplier risk assessments before entering into an agreement.