Which of the following is the BEST way to obtain assurance that the provider can adequately protect the organization’s information?

December 17, 2021 by Admin

A cloud service provider is unable to provide an independent assessment of controls. Which of the following is the BEST way to obtain assurance that the provider can adequately protect the organization’s information?

  • Check references supplied by the provider’s other customers.
  • Invoke the right to audit per the contract.
  • Review the provider’s information security policy.
  • Review the provider’s self-assessment.

Leave a Reply