MENU
A newly hired Chief Information Security Officer (CISO) is now responsible to build a third-party assurance for their organization. When assessing a third-party, which of the following questions needs to be answered?
Suggested Answer: D
Get Premium CPIM-8.0 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
21 comments · newest first
HE
Herman
2 days ago
C is less relevant. Focus on security, not money.
BR
Brandon
7 days ago
I lean towards D. Standards ensure quality.
KR
Kristeen
12 days ago
Agreed, B is important. But D also matters for compliance.
CL
Claribel
17 days ago
I think B is crucial. Security support is key.
AN
Annett
23 days ago
D is vital too. Standards guide the assessment process.
JA
Janine
28 days ago
Definitely B. Need to know their security capabilities.
CL
Clarinda
1 month ago
Right, A is not a priority. B and D are essential.
MO
Moon
1 month ago
A seems trivial. Employee count doesn't reflect security.
AL
Alysa
1 month ago
C is less relevant. Focus on security, not money.
LA
Lamonica
2 months ago
I lean towards D. Standards ensure quality.
MA
Marci
2 months ago
Agreed, B is important. But D also matters for compliance.
PA
Pamela
2 months ago
I think B is crucial. Security support is key.
RO
Ronnie
2 months ago
Totally agree with B, support level is everything!
NO
Nobuko
2 months ago
Surprised that C is even an option, it’s not about money!
AN
Anglea
2 months ago
I think D is crucial too, standards matter!
DU
Dustin
3 months ago
A seems irrelevant, who cares about employee count?
YU
Yuette
3 months ago
B is definitely a key question for security.
CA
Casie
3 months ago
I’m a bit confused about the employee count. Does it really impact the security assessment, or is it more about their policies and compliance?
KR
Krystal
3 months ago
I feel like we had a practice question about assessing third-party standards. It’s definitely something that should be considered in this scenario.
DE
Delsie
3 months ago
I’m not entirely sure, but I think the monetary value of the contract might not be as relevant as the actual security measures in place.
TU
Tu
4 months ago
I remember we discussed the importance of understanding the level of support a third-party provides related to security. That seems crucial for risk assessment.