Refer to the information below to answer the question. A large, multinational organization has decided to outsource a portion of their Information Technology (IT) organization to a third-party provide

Question

Options

• Aare more rigorous than the original controls.
• Bare able to limit access to sensitive information.
• Callow access by the organization staff at any time.
• Dcannot be accessed by subcontractors of the third party.

• A
  4% (1)
• B
  78% (21)
• C
  4% (1)
• D
  15% (4)

Explanation

The organization should ensure that the third party's physical security controls are in place so that they are able to limit access to sensitive information. Physical security controls are the measures or the mechanisms that protect the physical assets, such as the hardware, the software, the media, or the personnel, from the unauthorized or the malicious access, damage, or theft. Physical security controls can include locks, fences, guards, cameras, alarms, or biometrics. The organization should ensure that the third party's physical security controls are able to limit access to sensitive information, as it can prevent or reduce the risk of the data breach, the data loss, or the data corruption, and it can ensure the confidentiality, the integrity, and the availability of the information. The organization should also ensure that the third party's physical security controls are compliant with the organization's policies, standards, and regulations, and that they are audited and monitored regularly. The organization should not ensure that the third party's physical security controls are more rigorous than the original controls, allow access by the organization staff at any time, or cannot be accessed by subcontractors of the third party, as they are related to the level, the scope, or the restriction of the physical security controls, not the ability to limit access to sensitive information.

No community discussion yet for this question.