Câu 7: CA1-005: CompTIA SecurityX

A global organization is reviewing potential vendors to outsource a critical payroll function. Each vendor's plan includes using local resources in multiple regions to ensure compliance with all regulations. The organization's Chief Information Security Officer is conducting a risk assessment on the potential outsourcing vendors' subprocessors. Which of the following best explains the need for this risk assessment?

1. A. Risk mitigations must be more comprehensive than the existing payroll provider.
2. B. Due care must be exercised during all procurement activities.
3. C. The responsibility of protecting PII remains with the organization. — đáp án hiện tại
4. D. Specific regulatory requirements must be met in each jurisdiction.