CompTIA Security+ SY0-701 Practice Question

Conducting regular audits of the vendor's practices ensures that they maintain compliance with agreed-upon standards and policies over the duration of the relationship. While vendor-supplied compliance reports are useful, they may not always be as rigorous as independent audits. Service-Level Agreements (SLAs) primarily define service delivery expectations, not security compliance measures. Complete reliance on vendor-supplied security tools does not provide independent verification of security posture and could leave gaps in compliance monitoring.