A bank has just outsourced the security department to a consulting firm, but retained the security architecture group. A few months into the contract, the bank discovers that the consulting firm has sub-contracted some of the security functions to another provider. Management is pressuring the sourcing manager to ensure that adequate protections are in place to insulate the bank from legal and service exposures. Which of the following is the most appropriate action to take?

The CASP+ certification is suited to professionals who want to be immersed in technology as a practitioner, while the CISSP is suited for those who want to be in management or move into management. The CISSP focuses on management strategies, practices and principles.