Which of the following will be the MOST effective method to verify that a service vendor keeps control levels as required by the client?

Which of the following will be the MOST effective method to verify that a service vendor keeps control levels as required by the client?
A . Conduct periodic on-site assessments using agreed-upon criteria.
B. Periodically review the service level agreement (SLA) with the vendor.
C. Conduct an unannounced vulnerability assessment of vendor’s IT systems.
D. Obtain evidence of the vendor’s control self-assessment (CSA).

View Answer

Answer: C