Question

A SaaS provider contract is ending, and the business unit is migrating to a new vendor. The information security manager is asked to ensure the transition does not introduce risk. Which action is MOST important to complete during the offboarding of the outgoing vendor?

Accepted Answer

Confirm the return or verified destruction of the organization's data and revocation of all access held by the vendor

Answer

Conduct a final penetration test against the new vendor's production environment

Answer

Update the security awareness training to reference the new vendor's portal

Answer

Recalculate the annualized loss expectancy for the retired service