CISA Certified Information Systems Auditor – Question0650

Which of the following is MOST important to include in a contract with a critical service provider to help ensure alignment with the organization’s information security program?

A.
Escalation paths
B. Right-to-audit clause
C. Termination language
D. Key performance indicators (KPIs)

Correct Answer: D