Certified Information Systems Security Professional – CISSP – Question370

Lack of which of the following options could cause a negative effect on an organization’s reputation, revenue, and result in legal action, if the organization fails to perform due diligence?

A.
Threat modeling methodologies
B. Service Level Requirement (SLR)
C. Service Level Agreement (SLA)
D. Third-party risk management

Correct Answer: C