When assessing the risk of integrating a third-party product into an organization’s IT environment, which of the following is most relevant?
Correct Answer: B
Comprehensive and Detailed Step by Step Explanation:
* Vendor viability refers to the risk of a startup company's financial instability or inability to provide long-term support.
* A startup may have limited resources, which could impact the security, reliability, and availability of its products.
* Privacy concerns and regulatory compliance are possible risks but less relevant unless the tool deals directly with sensitive data or operates in a regulated industry.
* Geographic location is unlikely to directly affect the risk unless there are jurisdictional data transfer laws involved.
References:
* CompTIA CASP+ Exam Objective 1.2: Analyze the security risks and impacts of integrating diverse third-party products.
* CASP+ Study Guide, 5th Edition, Chapter 2, Third-Party Risk Assessment.