An organization is selecting a service provider to assist in the consolidation of multiple computing sites including development, implementation and ongoing support of various computer systems.
Which of the following MUST be verified by the Information Security Department?

Question

An organization is selecting a service provider to assist in the consolidation of multiple computing sites including development, implementation and ongoing support of various computer systems.

Which of the following MUST be verified by the Information Security Department?

Hassan Shafi · Accepted Answer

The service provider's policies can meet the requirements imposed by the new environment even if they differ from the organization's current policies.

Hassan Shafi · Answer

The service provider's policies are consistent with ISO/IEC27001 and there is evidence that the service provider is following those policies.

Hassan Shafi · Answer

The service provider will segregate the data within its systems and ensure that each region's policies are met.

Hassan Shafi · Answer

The service provider will impose controls and protections that meet or exceed the current systems controls and produce audit logs as verification.

Question list

List of questions

Question 1

(1)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 143 - CISSP discussion

Suggested answer: D

0 comments