Câu 347: Isaca Certified Information Security Manager

An organization has outsourced many application development activities to a third party that uses contract programmers extensively. Which of the following would provide the BEST assurance that the third party's contract programmers comply with the organization's security policies?

1. A. Perform periodic security assessments of the contractors' activities. — đáp án hiện tại
2. B. Conduct periodic vulnerability scans of the application.
3. C. Require annual signed agreements of adherence to security policies.
4. D. Include penalties for noncompliance in the contracting agreement.