Câu 333: Isaca Certified in Risk and Information Systems Control

While reviewing a contract of a cloud services vendor, it was discovered that the vendor refuses to accept liability for a sensitive data breach. Which of the following controls will BEST reduce the risk associated with such a data breach?

1. A. Engaging a third party to validate operational controls — đáp án hiện tại
2. B. Using the same cloud vendor as a competitor
3. C. Using field-level encryption with a vendor-supplied key
4. D. Ensuring the vendor does not know the encryption key