Câu 357: Isaca Certified Information Security Manager

An organization is considering using a third party to host sensitive archived data. Which of the following is MOST important to verify before entering into the relationship?

1. A. Independent audits of the vendor’s operations are regularly conducted.
2. B. The vendor’s controls are in line with the organization’s security standards. — đáp án hiện tại
3. C. The encryption keys are not provided to the vendor.
4. D. The vendor’s data centers are in the same geographic region.