Certified Information Security Manager (CISM) — Question 1027

What should be an information security manager's GREATEST concern when an HR department outsources data processing to a cloud service provider?

Answer options

• A. Security posture of the provider
• B. Data loss protection insurance
• C. Required provider service levels
• D. The scope of the data

Correct answer: D

Explanation

The scope of the data is crucial because it defines what data will be processed and how it will be handled, which directly impacts security measures. While the security posture of the provider, data loss protection insurance, and required service levels are important, they are secondary to understanding the specific types of data involved and their sensitivity.