nerdexam
Isaca

CGEIT · Question #418

A business has outsourced IT operations to several third-party providers, but service level agreements (SLAs) are not clearly defined in all cases. Which of the following is the GREATEST risk to the…

The correct answer is D. Quality of services is not enforceable. When SLAs are poorly defined, the business cannot hold third-party providers accountable for the quality or performance of services, which poses the greatest risk of service degradation and business impact.

Submitted by thandi_sa· Apr 18, 2026Governance of Enterprise IT

Question

A business has outsourced IT operations to several third-party providers, but service level agreements (SLAs) are not clearly defined in all cases. Which of the following is the GREATEST risk to the business?

Options

  • ACosts are not measurable.
  • BThird parties could provide overlapping services.
  • CThe scope of work is not clearly defined.
  • DQuality of services is not enforceable.

How the community answered

(54 responses)
  • A
    15% (8)
  • B
    9% (5)
  • C
    30% (16)
  • D
    46% (25)

Why each option

When SLAs are poorly defined, the business cannot hold third-party providers accountable for the quality or performance of services, which poses the greatest risk of service degradation and business impact.

ACosts are not measurable.

While costs might be harder to measure without clear SLAs, the lack of enforceability on service quality poses a more direct and significant operational risk than just financial measurement difficulties.

BThird parties could provide overlapping services.

Overlapping services can lead to inefficiencies and increased costs, but it is a consequence of poor contract management and scope definition, rather than the primary risk stemming directly from undefined SLAs, which primarily focus on service performance and quality.

CThe scope of work is not clearly defined.

If the scope of work is not clearly defined, it can lead to disputes and unmet expectations, but undefined SLAs specifically prevent the business from holding the provider accountable for the quality and performance of even an agreed-upon scope.

DQuality of services is not enforceable.Correct

Without clearly defined SLAs, there are no agreed-upon metrics, targets, or remediation clauses, making it impossible for the business to legally or contractually enforce minimum standards of service quality, availability, or performance from the third-party providers. This directly impacts business operations and customer satisfaction.

Concept tested: SLA importance in outsourcing

Topics

#Outsourcing Risks#Service Level Agreements (SLAs)#Vendor Governance#Quality Enforcement

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice