MENU
A banking organization has outsourced its customer data processing facilities to an external service provider. Which of the following roles is accountable for ensuring the security of customer data?
Suggested Answer: D
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
CA
Carrol
11 months ago
Isn't it a shared responsibility between the bank and the provider?
BL
Blondell
12 months ago
Wait, can the service provider really be trusted with our data?
VI
Vincenza
12 months ago
I think the vendor risk manager has a big role too.
DE
Devorah
12 months ago
Totally agree, they set the policies!
AM
Amie
1 year ago
The bank's senior management is ultimately accountable.
DO
Dominga
1 year ago
I’m leaning towards the bank's vendor risk manager, but I wonder if the service provider's data processor has any accountability in this situation.
CA
Catherin
1 year ago
I remember a practice question where the vendor risk manager had a significant role in overseeing third-party risks. Could that apply here?
NA
Nana
1 year ago
I think the bank's senior management should be accountable since they ultimately oversee all operations, but I'm not entirely sure.
KA
Kathryn
1 year ago
The service provider's data privacy officer sounds like a good choice, but I feel like the bank should have some responsibility too.
MI
Mindy
1 year ago
I think this is a straightforward question. The key is to identify the two products that are included in Microsoft Relationship Sales. I'll carefully review the options and select the correct answers.
DE
Deandrea
1 year ago
Hmm, this is a tricky one. I'm not totally sure, but I'm leaning towards identifying the business requirements for the data. That seems like it would be a key first step before deciding what to collect.
GA
Gail
1 year ago
This question reminds me of a similar one we practiced where the calculation results depended on previous data items. I wonder if that's the case here too.
SU
Sunny
1 year ago
Ah, I see now. The missing step is A - pulling/pushing the image to the Docker registry. That makes sense, as we need to get the container image into the right place before we can deploy it.