A service provider is managing a client's servers. During an audit of the service, a noncompliant control is discovered that will not be resolved before the next audit because the client cannot afford the downtime required to correct the issue. The service provider's MOST appropriate action would be to:

Question

Marcio Lizarbe · Accepted Answer

ask the client to document the formal risk acceptance for the provider

Marcio Lizarbe · Answer

develop a risk remediation plan overriding the client's decision

Marcio Lizarbe · Answer

make a note for this item in the next audit explaining the situation

Marcio Lizarbe · Answer

insist that the remediation occur for the benefit of other customers

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 582 - CRISC discussion

Suggested answer: D

0 comments