Câu 460: Isaca Certified in Risk and Information Systems Control

A vendor manager reports that a previously compliant service provider had issues with its most recent security audit. Which of the following is the MOST important course of action?

1. A. Determine whether credits are due under the service level agreement (SLA)
2. B. Schedule an independent audit of the vendor
3. C. Ensure that the vendor remediates all identified issues
4. D. Determine whether any of the issues could impact the business — đáp án hiện tại