CISA Question 78

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  C for me

• 1

  External parties might put information at risk if their security management is inadequate. Controls should be identified and applied to administer external party access to information processing facilities. For example, if there is a special need for confidentiality of the information, nondisclosure agreements might be used.

• Chose C1

  C for sure. Not SOW because statement of work (SOW) is a security blueprint for an IT project only.