An internal Service Level Agreement (SLA) covering security is signed by senior managers and is in
place. When should compliance to the SLA be reviewed to ensure that a good security posture is
being delivered?
A.
As part of the SLA renewal process
B.
Prior to a planned security audit
C.
Immediately after a security breach
D.
At regularly scheduled meetings
I would rephrase the answer to “Regularly”. All that has to be done is the performace or conduction of regular reviews of the service level metrics. Meetings are unnecessary.