An organization has decided to reduce labor costs by outsourcing back-office processing of credit applications to a provider located in another country. Data sovereignty and privacy concerns raised by the security team resulted in the third-party provider only accessing and processing the data via remote desktop sessions. To facilitate communications and improve productivity, staff at the third party have been provided with corporate email accounts that are only accessible via remote desktop sessions. Email forwarding is blocked and staff at the third party can only communicate with staff within the organization. Which of the following additional controls should be implemented to prevent data loss?

The CASP+ certification is suited to professionals who want to be immersed in technology as a practitioner, while the CISSP is suited for those who want to be in management or move into management. The CISSP focuses on management strategies, practices and principles.