CISSP Question #1158: Real Exam Question with Answer & Explanation

Question

Which of the following outsourcing agreement provisions has the HIGHEST priority from a security operations perspective?

Options

• AConditions to prevent the use of subcontractors
• BTerms for contract renegotiation in case of disaster
• CEscalation process for problem resolution during incidents
• DRoot cause analysis for application performance issue

Explanation

An escalation process for problem resolution during incidents is a provision that defines how to escalate and resolve issues that arise during security incidents, such as breaches, attacks, or disruptions. An escalation process is a high priority from a security operations perspective, as it can help to minimize the impact and duration of the incidents, as well as to coordinate the response and recovery efforts among the involved parties. An escalation process may include the following elements: the roles and responsibilities of the incident response team, the communication channels and methods, the criteria and thresholds for escalation, the escalation levels and procedures, the escalation matrix and contacts, and the escalation reporting and

No community discussion yet for this question.