The manager of a key project has bypassed the standard contractor onboarding process to acquire additional resources for delivering the project on time. Contracts were executed offline, and contractor

Question

Options

• AThe project may be delayed further if the incident is reported.
• BThe contractors may inappropriately outsource the business functions to fourth-party suppliers.
• CThe contractors may not operate in line with industry benchmarks.
• DThere are insufficient contractual requirements in place to govern third-party arrangements.

• A
  16% (6)
• B
  3% (1)
• C
  8% (3)
• D
  74% (28)

Explanation

The PRIMARY concern is that no formal contracts with proper security, compliance, and governance clauses were established. Standard contractor onboarding exists specifically to ensure legal agreements capture requirements around data handling, confidentiality, liability, access controls, and termination rights. Without these contractual protections, the organization has no enforceable mechanism to govern the third parties' behavior. Delay risk (A) is a secondary operational concern, not a security governance concern. Fourth-party outsourcing (B) and industry benchmarks (C) are subordinate risks that stem from the absence of proper contractual requirements - making D the root cause.

No community discussion yet for this question.