When evaluating third-party applications, which of the following is the GREATEST responsibility of Information Security?

exams CISSP CISSP exam 0 Comments

When evaluating third-party applications, which of the following is the GREATEST responsibility of Information Security?
A . Accept the risk on behalf of the organization.
B . Report findings to the business to determine security gaps.
C . Quantify the risk to the business for product selection.
D . Approve the application that best meets security requirements.

Answer: C