Câu 328: Isaca Certified Information Security Manager

An organization plans to utilize Software as a Service (SaaS) and is in the process of selecting a vendor. What should the information security manager do FIRST to support this initiative?

1. A. Review independent security assessment reports for each vendor.
2. B. Benchmark each vendor's services with industry best practices.
3. C. Define information security requirements and processes. — đáp án hiện tại
4. D. Analyze the risks and propose mitigating controls.