A chief Information Officer (CISO) is working with a consultant to perform a gap assessment prior to an upcoming audit. It is determined during the assessment that the organization lacks controls to effectively assess regulatory compliance by third-party service providers. Which of the following should be revised to address this gap?

A. Privacy policy

B. Work breakdown structure

C. Interconnection security agreement

D. Vendor management plan

E. Audit report

Question

Computers and Technology

Silky

11 July, 11:58

A chief Information Officer (CISO) is working with a consultant to perform a gap assessment prior to an upcoming audit. It is determined during the assessment that the organization lacks controls to effectively assess regulatory compliance by third-party service providers. Which of the following should be revised to address this gap?

A. Privacy policy

B. Work breakdown structure

C. Interconnection security agreement

D. Vendor management plan

E. Audit report

+5

Answers (1)

Know the Answer?

German Barnes · Answer 1

Answer: (D) Vendor management plan

Explanation:

The chief information officer (CISO) is basically explain about areas of the improvement to the vendors so that is why vendor management plan should be implemented to address the gap assessment in the upcoming audit.

Chief information officer basically managed all the report that are provided to the department of the audit on the monthly bases.

The vendor management are basically responsible for managing all the upcoming assessment in the audit in an organization.