Question

A chief Information Officer (CISO) is working with a consultant to perform a gap assessment prior to an upcoming audit. It is determined during the assessment that the organization lacks controls to effectively assess regulatory compliance by third-party service providers. Which of the following should be revised to address this gap?

A. Privacy policy
B. Work breakdown structure
C. Interconnection security agreement
D. Vendor management plan
E. Audit report

Answer 1

Answer: (D) Vendor management plan

Step-by-step explanation:

The chief information officer (CISO) is basically explain about areas of the improvement to the vendors so that is why vendor management plan should be implemented to address the gap assessment in the upcoming audit.

Chief information officer basically managed all the report that are provided to the department of the audit on the monthly bases.

The vendor management are basically responsible for managing all the upcoming assessment in the audit in an organization.