PECB
LEAD-IMPLEMENTER · Question #190
What action should an organization take to ensure the security of information when it is transferred or treated by an external party?
The correct answer is B. Include security clauses in a contractual agreement with the external party. See the full explanation below for the reasoning.
Question
What action should an organization take to ensure the security of information when it is transferred or treated by an external party?
Options
- ARely on external parties to implement their own security measures
- BInclude security clauses in a contractual agreement with the external party
- CExclude external parties from the ISMS scope to limit risk exposure
How the community answered
(24 responses)- A21% (5)
- B71% (17)
- C8% (2)
Community Discussion
No community discussion yet for this question.