Which of the following would be BEST for the third-party vendor to provide to the CISO?

The Chief Information Security Officer (CISO) has requested that a third-party vendor provide supporting documents that show proper controls are in place to protect customer data.

Which of the following would be BEST for the third-party vendor to provide to the CISO?
A . GDPR compliance attestation
B. Cloud Security Alliance materials
C. SOC 2 Type 2 report
D. NIST RMF workbooks

View Answer

Answer: C

Explanation:

https://www.itgovernance.co.uk/soc-reporting