Changes to which of the following will MOST likely influence the expansion or reduction of controls required to remediate the risk arising from changes to an organization’s SaaS vendor?
- A.Risk exceptions policy
- B.Contractual requirements
- C.Risk appetite
- D.Board oversight