nerdexam
(ISC)2

HCISPP · Question #41

Which of the following trust services principles refers to the accessibility of information used by the systems, products, or services offered to a third-party provider's customers?

The correct answer is C. Access. Access (option C) is correct because this trust services principle is specifically defined around whether information and systems are accessible to authorized users of third-party provider services - i.e., can the right people get to the data they need. Why the distractors are…

Third-Party Risk Management

Question

Which of the following trust services principles refers to the accessibility of information used by the systems, products, or services offered to a third-party provider's customers?

Options

  • ASecurity
  • BPrivacy
  • CAccess
  • DAvailability

How the community answered

(65 responses)
  • A
    2% (1)
  • B
    6% (4)
  • C
    89% (58)
  • D
    3% (2)

Explanation

Access (option C) is correct because this trust services principle is specifically defined around whether information and systems are accessible to authorized users of third-party provider services - i.e., can the right people get to the data they need.

Why the distractors are wrong:

  • Security (A) focuses on protecting systems and information from unauthorized access, not on ensuring legitimate accessibility.
  • Privacy (B) governs how personal information is collected, used, retained, and disclosed - it's about data handling practices, not accessibility.
  • Availability (D) refers to whether systems are operationally available (uptime, continuity) rather than whether information itself is accessible to the right users.

Memory tip: Think of Access as the "door key" principle - it's about authorized parties being able to open the door to information, while Availability is about whether the building is open for business. If the question mentions "accessibility of information to customers or third parties," that's your cue to select Access.

Topics

#Trust Services Principles#Access Controls#Third-Party Risk#AICPA TSP

Community Discussion

No community discussion yet for this question.

Full HCISPP Practice