CompTIA · Security+ SY0-801
Third-party risk
Security+ SY0-801 · Lesson 29 of 32 · 4:30:37
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the Security+ SY0-801 exam (CompTIA Security+ V8). In this lesson: choosing a vendor (requests for proposal, information, and quote, due diligence, and conflicts of interest), agreement types (SLA, SLO, MOU, MOA, NDA, MSA, and SOW), monitoring vendors with the right to audit and questionnaires, and limitations and constraints. Includes three original practice questions.
Preview the topics
- Ashgrove and a consulting firm sign one contract with the general terms, then a short document for each new project, with its tasks, deliverables, and dates. What is the short document?
- Ashgrove’s contract lets it send its own auditor to inspect the data center of its hosting provider, with notice. Which clause is this?
- Moving Ashgrove’s design files off a vendor’s platform would take months, because they are stored in a format that no other tool can open. What is this problem called?