Q39
Single choice
Over the last year, an information security manager has performed risk assessments on multiple third-party vendors.
Which of the following criteria would be MOST helpful in determining the associated level of risk applied to each vendor?