CISSP Question #171: Real Exam Question with Answer & Explanation

Question

Refer to the information below to answer the question. A large, multinational organization has decided to outsource a portion of their Information Technology (IT) organization to a third-party provider's facility. This provider will be responsible for the design, development, testing, and support of several critical, customer-based applications used by the organization. The organization should ensure that the third party's physical security controls are in place so that they

Options

• Aare more rigorous than the original controls.
• Bare able to limit access to sensitive information.
• Callow access by the organization staff at any time.
• Dcannot be accessed by subcontractors of the third party.