CAS-001 · Question #198
A company has purchased a new system, but security personnel are spending a great deal of time on system maintenance. A new third party vendor has been selected to maintain and manage the company's…
The correct answer is C. SLA. A Service Level Agreement (SLA) defines the formal terms of a relationship between a company and a third-party vendor before work begins. It specifies deliverables, performance metrics, uptime guarantees, response times, responsibilities, and remedies for non-compliance…
Question
A company has purchased a new system, but security personnel are spending a great deal of time on system maintenance. A new third party vendor has been selected to maintain and manage the company's system. Which of the following document types would need to be created before any work is performed?
Options
- AIOS
- BISA
- CSLA
- DOLA
How the community answered
(19 responses)- B5% (1)
- C95% (18)
Explanation
A Service Level Agreement (SLA) defines the formal terms of a relationship between a company and a third-party vendor before work begins. It specifies deliverables, performance metrics, uptime guarantees, response times, responsibilities, and remedies for non-compliance. Establishing an SLA protects both parties and sets clear expectations. An ISA (Interconnection Security Agreement) is used specifically when two organizations interconnect their networks and addresses security requirements for that connection. An OLA (Operational Level Agreement) is an internal agreement between departments within the same organization. 'IOS' is not a standard document type in vendor management. Since the scenario involves an external vendor managing the company's system, an SLA is the required document.
Topics
Community Discussion
No community discussion yet for this question.