Which assessment approach involves outsourcing security tasks to external auditors and can be hosted inside or outside the network?

Which assessment approach involves outsourcing security tasks to external auditors and can be hosted inside or outside the network?

• A. Credentialed Assessment
• B. Service-Based Solutions
• C. Non-Credentialed Assessment
• D. Inference-Based Assessment

Answer: (B)

Outsourcing security tasks to external auditors delivered as a service is what defines service-based solutions. This approach contracts third-party experts to perform assessments, testing, and related security tasks rather than relying entirely on in-house staff. It’s flexible about where the work happens, too—the service can be hosted within your own network, hosted in the external provider’s environment (often in the cloud), or run in a hybrid setup that combines both. That hosting flexibility and the external expert involvement are the hallmarks of this model, making it the best fit for describing an assessment approach that can be outsourced and hosted either inside or outside the network. The other concepts focus on credentials or inference of data, not on engaging external auditors as a service or where the service is hosted.

Outsourcing security tasks to external auditors delivered as a service is what defines service-based solutions. This approach contracts third-party experts to perform assessments, testing, and related security tasks rather than relying entirely on in-house staff. It’s flexible about where the work happens, too—the service can be hosted within your own network, hosted in the external provider’s environment (often in the cloud), or run in a hybrid setup that combines both. That hosting flexibility and the external expert involvement are the hallmarks of this model, making it the best fit for describing an assessment approach that can be outsourced and hosted either inside or outside the network. The other concepts focus on credentials or inference of data, not on engaging external auditors as a service or where the service is hosted.