Which of the following would be of GREATEST concern to an information security manager when evaluating a cloud service provider (CSP)?

exams CISM V1 CISM exam 0 Comments

Which of the following would be of GREATEST concern to an information security manager when evaluating a cloud service provider (CSP)?
A . Security controls offered by the provider are inadequate
B . Service level agreements (SLAs) art not well defined.
C . Data retention policies may be violated.
D . There is no right to audit the security of the provider

Answer: B