When remote access to confidential information is granted to a vendor for analytic purposes, which of the following is the MOST important security consideration?

A. The vendor must be able to amend data

B. The vendor must agree to the organization's information security policy

C. Data is encrypted in transit and at rest at the vendor site

D. Data is subject to regular access log review








 

Suggested Answer: C



This question is in CISM exam 
For getting Certified Information Security Manager Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.