Exam CISA topic 1 question 744 discussion

Actual exam question from Isaca's CISA

Question #: 744
Topic #: 1

Which of the following will be the MOST effective method to verify that a service vendor keeps control levels as required by the client?

A. Obtain evidence of the vendor's control self-assessment (CSA).
B. Periodically review the service level agreement (SLA) with the vendor.
C. Conduct periodic on-site assessments using agreed-upon criteria.
D. Conduct an unannounced vulnerability assessment of vendor's IT systems.

Show Suggested Answer

Suggested Answer: C 🗳️

by Evedzy at Oct. 12, 2022, 4:20 p.m.

Comments

Submit Cancel

starzuu

Highly Voted 1 year ago

remember bois. On site assessments are very important in CISA context.

upvoted 5 times

...

maxson69

Most Recent 1 month, 3 weeks ago

Selected Answer: C

Conduct periodic on-site assessments using agreed-upon criteria because this method provides the most reliable and independent verification of control effectiveness.

upvoted 1 times

...

ItsBananass

1 year ago

isnt "service vendor" really another name for internet service provider. If you want to measure service providers, you use SLA's. So. B

upvoted 2 times

ItsBananass

1 year ago

And are you going to assess your service provider? I say No.

upvoted 1 times

...

A vulnerability assessment provides an organization with details on any security weaknesses of controls in its environment and would be an effective method to verify that a service vendor keeps control levels as required by the client.

upvoted 1 times

...