Exam CISSP topic 1 question 213 discussion

The root cause analysis often highlights issues that require remediation to prevent similar incidents in the future, so I think it's the most important thing for SecOps.

I think the answer is C. A and B.. are not valid for security operation.. D is the escalation process for problem during incident... C... will make more sense as RCA for application performance issue that can be cause by Cyber Attack?

D. It's between A and D but the question mentioned security operations.

Option D, Escalation process for problem resolution during incidents, ensures that there is a clear and effective process in place for resolving security incidents and minimizing the impact of any security breaches. It is critical to have a well-defined escalation process to ensure that security incidents are handled promptly and efficiently. The other provisions listed are also important, but they do not have as high a priority from a security operations perspective as the escalation process for problem resolution during incidents. An escalation process is necessary for resolving security incidents promptly and efficiently. Outsourcing agreements transfer responsibility and control of certain business functions to a third-party provider, but ultimate responsibility for information security still rests with the organization. Therefore, an escalation process helps maintain security posture and communication and accountability between the organization and the outsourcing provider.

The question doesn't mention what is being outsourced, so D might not be applicable. What if you're outsourcing the cafeteria? A seems to be the best answer, I once used a contractor to do construction and he subcontracted work, it had to be redone. Avoid subcontractors if you can.

I'm going for D. Subcontractors aren't the HIGHEST concern. Yes, it elevates the risks. But, without proper incident handling "our" business could make huge losses. Therefore this is the highest priority of the given options.

According to the International Association of Computer Science and Information Technology (IACSIT), the outsourcing agreement provision with the highest priority from a security operations perspective is the escalation process for problem resolution during incidents. This is because it is important for organizations to have a clear and efficient process in place for resolving problems that may arise during an incident, in order to minimize the impact on the organization and maintain the security of its systems and data. Other provisions, such as those related to subcontracting and contract renegotiation, may also be important for ensuring the security and integrity of the organization's systems, but the escalation process for problem resolution is typically considered the most critical from a security operations perspective.

If Third-Party Governance process is well managed, then A is excluded. I would go with D.

very unclear state questions. anoying. I go for a, most of the rest is not security but system operations

Agreed, D

Will go with A. Subcontracting increases security risk and compliance perimeter, and ensuring everything is compliant from security point of view is highest priority. Reference: https://softwarehut.com/blog/it-outsourcing/outsourcing-contract-clauses

D first, A would be second

you are correct, its A. Not quite sure what I was thinking there.

Selecting D. Question is from security operations (SOC ?) perspective

Answer is A. Its pretty obvious