A Chief Information Security Officer (CISO) Is Working with a Consultant

A Chief Information Security Officer (CISO) is working with a consultant to perform a gap assessment prior to an upcoming audit. It is determined during the assessment that the organization lacks controls to effectively assess regulatory compliance by third-party service providers. Which of the following should be revised to address this gap?

A) Privacy policy
B) Work breakdown structure
C) Interconnection security agreement
D) Vendor management plan
E) Audit report

Correct Answer:

Verified

Unlock this answer now
Get Access to more Verified Answers free of charge

Access For Free