IsacaIsaca
CISM · Question #815
CISM Question #815: Real Exam Question with Answer & Explanation
Sign in or unlock CISM to reveal the answer and full explanation for question #815. The question stem and answer options stay visible for context.
Submitted by yaw92· Apr 18, 2026Information Security Governance
Question
The manager of a key project has bypassed the standard contractor onboarding process to acquire additional resources for delivering the project on time. Contracts were executed offline, and contractors were provided organizational access without going through the standard due diligence process. Which of the following should be the PRIMARY concern?
Options
- AThe project may be delayed further if the incident is reported.
- BThe contractors may inappropriately outsource the business functions to fourth-party suppliers.
- CThe contractors may not operate in line with industry benchmarks.
- DThere are insufficient contractual requirements in place to govern third-party arrangements.
Unlock CISM to see the answer
You've previewed enough free CISM questions. Unlock CISM for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Third-party risk management#Contractual security#Due diligence#Governance oversight