An organization that conducts business globally is planning to utilize a third-party service provider to process payroll information. Which of the following issues poses the GREATEST risk to the organization?
If an organization does not have an information security governance framework in place, which of the following would BEST facilitate the adoption of a future governance program?