17d • 🙋♂️ CISSP
CISSP Practice Question (Domain 6: Security Assessment and Testing)
A cloud payroll vendor offers a SOC 2 Type I report dated 14 months ago to close a contract due Friday. HR wants to sign. What should the security manager do FIRST?
A. Require a current SOC 2 Type II before signing
B. Review the report's scope, period and exceptions against services used
C. Sign with a contractual right to audit clause
D. Commission an independent penetration test of the vendor
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
4
18 comments
CISSP Practice Question (Domain 6: Security Assessment and Testing)
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
1
+33
2
+29
3
+29
4
+28
5
+24
Powered by