CISM Certified Information Security Manager – Question0217

During the establishment of a service level agreement (SLA) with a cloud service provider, it is MOST important for the information security manager to:

A.
update the security policy to reflect the provider's terms of service.
B. ensure security requirements are contractually enforceable.
C. set up proper communication paths with the provider.
D. understand the cloud storage architecture in use to determine security risk.

Correct Answer: B