Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Continuous monitoring provides the BEST assurance that a third-party provider is actively meeting security requirements on an ongoing basis, not just at a point in time. It allows for: • Real-time visibility into compliance and risk posture • Proactive detection of control failures or vulnerabilities • Ensuring service-level and security-level agreements are being upheld • Early response to changes in the third party’s environment
ConMon involves regularly checking a vendor's security posture, including their compliance with regulations, security controls in place, and any changes made to their systems.
In the "CISM Review Manual 15th Edition" by ISACA, it is stated in Domain 4: Incident Management and Response, that continuous monitoring is a critical part of the overall incident management process, and it extends to monitoring third-party providers to ensure they meet the organization's security requirements.