CISM Question 322

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  To perform a risk analysis on the outsourcing process is the best answer. Keep in mind that the risk analysis encompasses the ensurance of clauses for periodic audits.

• Chose D1

  Risk analysis is performed at an earlier stage to determine whether to outsource or not. In this question the contract is being "finalized", which means risk analysis has already been completed. Hence inclusion of "Right to Audit" clause is the correct answer here.

• Chose A2

  A my dawg