Prática ISC2 CISSP

A vendor risk management program requires all third parties with access to sensitive data to complete a security assessment before contract signature and annually thereafter. Which concept does this program address?

• ASupply chain risk management
• BBusiness continuity planning
• CChange management
• DConfiguration management