Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Answer should be B. The question asking "controls for monitoring the regulatory compliance of a third party". According to TPRM life cyccle. A → Due Diligence / Risk Assessment C → Due Diligence / Risk Assessment D → Onboarding / Requirement Communication B → Ongoing Monitoring / Compliance Finding
I will change my answer. Answer should be D. D = regulatory requirement B = policy-related noncompliance issue
Compliance Risk is owned by the organization, and it should make sure that the third-party org adheres to it if applicable.