Discuss Exin ISMP Exam Topic 3 Question 20

Security monitoring is an important control measure to make sure that the required security level is maintained. In order to realize 24/7 availability of the service, this service is outsourced to a partner in the cloud.

What should be an important control in the contract?

AThe network communication channel is secured by using encryption.

CThe third party is certified for adhering to privacy protection controls.

BThe third party is certified against ISO/IEC 27001.

DYour IT auditor has the right to audit the external party's service management processes.

Suggested Answer: D

Get Premium ISMP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

26 comments · newest first

Silva 4 months ago

Agreed! Regular audits should be included too.

Chuck 4 months ago

What about data protection clauses? Very important!

Micaela 4 months ago

Definitely! Service level agreements should be clear.

Sabrina 4 months ago

I think uptime guarantees are crucial.

Irma 6 months ago

Wait, are we really outsourcing 24/7 monitoring? Sounds risky!

Helaine 6 months ago

Totally agree, security audits should be included too!

Edda 6 months ago

Don't forget about data privacy clauses!

Judy 6 months ago

Really? Can we trust a cloud partner that much?

Man 6 months ago

SLA for uptime is a must!

Kenneth 7 months ago

Penalties for the provider if they fail to meet the agreed-upon security standards.

Vallie 7 months ago

Haha, don't forget the "break glass in case of emergency" clause!

Hillary 7 months ago

Strict data privacy and security clauses to protect sensitive information.

Carmelina 7 months ago

Detailed audit and reporting requirements to ensure compliance.

Gaynell 7 months ago

Service level agreement with clear uptime and response time requirements.

Vilma 8 months ago

I feel like there should be a clause about regular security audits, but I can't recall if that's standard practice in all contracts.

Luisa 8 months ago

We practiced a similar question about cloud service contracts, and I believe data protection clauses are also essential to ensure compliance with regulations.

Augustine 8 months ago

I'm not entirely sure, but I remember something about including incident response times in the contract. That seems crucial for security monitoring.

Brigette 9 months ago

I think one important control in the contract should be the Service Level Agreement (SLA) that specifies uptime guarantees.

Glenn 9 months ago

The big thing for me would be access controls and privileged user management. Gotta make sure only authorized personnel can access the security data.

Aliza 9 months ago

I'm a bit unsure on this one. Maybe I'd ask about how the cloud provider will ensure 24/7 availability and redundancy of the security monitoring service.

Felicidad 9 months ago

Definitely need to cover data protection and privacy requirements in the contract. Can't outsource security and risk compliance issues.

Hoa 9 months ago

Okay, I think I'd look at how the cloud provider will monitor and report on security incidents. Transparency is key.

Novella 9 months ago

Hmm, this one's tricky. I'd focus on ensuring the contract has clear SLAs and incident response procedures.

Lavera 3 months ago

↳ replying to Novella

What about regular security audits?

Becky 3 months ago

↳ replying to Novella

Incident response procedures are a must!

Lauran 4 months ago

↳ replying to Novella

Definitely need clear SLAs.

Exin ISMP Exam - Topic 3 Question 20 Discussion