Free Preparation Discussions
MENU
Exin CDFOM Exam - Topic 11 Question 3 Discussion
Topic #: 11
The data center service provider has decided that maintenance of the data center facilities infrastructure will be outsourced.
Is it still involved in the risk management process of data center maintenance?
EPI's governance and risk management principles clearly state:
When a data center outsources maintenance, operational work can be outsourced, but risk cannot be transferred.
Risk may be shared, mitigated, or reduced through contractual arrangements, but ownership remains with the data center service provider.
The data center operator is still responsible for ensuring compliance, operational continuity, and safety---even if another party performs the maintenance tasks.
Therefore:
The service provider must remain involved in risk evaluation, risk treatment, and ongoing monitoring.
Oversight responsibilities cannot be delegated.
Options C and D are incorrect because outsourcing the activity does not outsource risk accountability.
Option B is irrelevant because risk responsibility does not depend on provider expertise.
Thus, A is correct.
EPI DCFOM-Aligned Reference Concepts (Paraphrased)
Risk ownership remains with the organization even when maintenance is outsourced.
Outsourcing shares risk but does not transfer it.
The data center must maintain involvement in the risk management process.
Frank
3 days agoBonita
8 days agoNiesha
13 days agoGilma
18 days agoKerry
24 days agoBarrett
29 days agoSherell
1 month agoRaul
2 months agoRonna
2 months agoWava
2 months agoVeronika
2 months agoRana
3 months agoBelen
3 months agoGlynda
3 months agoBrianne
3 months agoKimbery
3 months agoBelen
3 months agoKatie
4 months agoNada
4 months agoRhea
4 months agoRuthann
4 months ago