Certified Information Security Manager CISM · Free Practice Question Medium
Question 62
For an organization that outsources its payroll processing, what is the MOST effective key risk indicator to monitor the information security of the service provider?
- A A. Impact on business processes due to incidents
- B B. Number of security controls implemented by the service provider
- C C. Frequency of security audits conducted by the service provider
- D D. Compliance with contractual service-level agreements (SLAs)
Reveal correct answer
Correct answer: A
Explanation
Correct Answer: A. Impact on business processes due to incidents Explanation: The most effective key risk indicator for monitoring the information security of the service provider in the context of outsourced payroll processing is the impact on business processes due to incidents. Assessing the impact of security incidents on critical business processes provides a direct measure of the potential harm caused by security breaches or disruptions. This indicator helps the Information Security Manager understand the real-world consequences of security incidents on the organization's operations and the effectiveness of the service provider in maintaining the confidentiality, integrity, and availability of payroll data.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
