A small organization has a contract with a multinational cloud computing vendor. Which of the following would present the GREATEST concern to an information security manager if omitted from the contract?

A. Escrow of software code with conditions for code release

B. Right of the subscriber to conduct onsite audits of the vendor

C. Authority of the subscriber to approve access to its data

D. Commingling of subscribers' data on the same physical server








 

Suggested Answer: C



This question is in CISM exam 
For getting Certified Information Security Manager Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.