Page 1579 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

place? If outside the home country of the client and/or vendor,
what implications does that have?

What is the vendor’s incident response process and when will

clients be notified of a potential security breach?

What provisions are in place to ensure the ongoing integrity
and availability of client data?

3. Some common steps that employers take to notify employees of
monitoring include clauses in employment contracts that state that
the employee should have no expectation of privacy while using

corporate equipment, similar written statements in corporate
acceptable use and privacy policies, logon banners warning that all
communications are subject to monitoring, and labels on
computers and telephones warning of monitoring.