Câu 332: Isaca Certified Information Security Manager

Which of the following is the MOST effective way for an organization to ensure its third-party service providers are aware of information security requirements and expectations?

1. A. Including information security clauses within contracts — đáp án hiện tại
2. B. Auditing the service delivery of third-party providers
3. C. Providing information security training to third-party personnel
4. D. Requiring third parties to sign confidentiality agreements