CAS-002 · Question #667
A company has purchased a new system, but security personnel are spending a great deal of time on system maintenance. A new third party vendor has been selected to maintain and manage the company's…
The correct answer is C. SLA. A Service Level Agreement (SLA) must be established with a third-party vendor before any work begins to formally define service expectations, performance metrics, and mutual responsibilities.
Question
A company has purchased a new system, but security personnel are spending a great deal of time on system maintenance. A new third party vendor has been selected to maintain and manage the company's system. Which of the following document types would need to be created before any work is performed?
Options
- AIOS
- BISA
- CSLA
- DOLA
How the community answered
(62 responses)- A3% (2)
- B2% (1)
- C94% (58)
- D2% (1)
Why each option
A Service Level Agreement (SLA) must be established with a third-party vendor before any work begins to formally define service expectations, performance metrics, and mutual responsibilities.
IOS refers to Cisco's Internetwork Operating System or Apple's mobile OS - it is not a governance or contractual document type.
An ISA (Interconnection Security Agreement) governs security requirements when two organizations connect their IT systems to each other, not general managed service or maintenance arrangements.
An SLA is a contractual document between a company and an external vendor that specifies the scope of services, performance standards, response times, and liabilities. It must exist before the vendor performs any work to establish enforceable obligations and protect both parties from ambiguity about service delivery.
An OLA (Operational Level Agreement) is an internal agreement between departments within the same organization, not a document used between a company and an external third-party vendor.
Concept tested: Third-party vendor service level agreement requirements
Source: https://csrc.nist.gov/publications/detail/sp/800-35/final
Topics
Community Discussion
No community discussion yet for this question.