Câu 101: Isaca Certified Information Security Manager

What would be an information security manager's BEST recommendation upon learning that an existing contract with a third party does not clearly identify requirements for safeguarding the organization's critical data?

1. A. Cancel the outsourcing contract.
2. B. Transfer the risk to the provider.
3. C. Create an addendum to the existing contract. — đáp án hiện tại
4. D. Initiate an external audit of the provider's data center.