Question

An IS auditor is reviewing an SLA between an organization and its primary cloud hosting provider. The SLA commits the provider to 99.9% availability. During the review, the auditor learns that the provider relies on a third-party network carrier for connectivity but has no formal underpinning agreement with that carrier guaranteeing comparable service levels. Which of the following is the auditor's GREATEST concern?

Accepted Answer

The provider's availability commitment may not be achievable because the dependent carrier's service levels are not contractually assured

Answer

The organization cannot invoke service credits directly against the network carrier

Answer

The primary provider's data center certifications may have expired

Answer

The organization has not benchmarked the 99.9% target against industry peers