Which item is NOT typically included in technology risk management for service delivery?

• A. Data security
• B. Vendor management
• C. Incident response planning
• D. Homeopathy training

Answer: (D)

Technology risk management for service delivery focuses on protecting information assets and ensuring ongoing service. The core areas involve safeguarding data, overseeing third-party risk, and having a clear plan for detecting, responding to, and recovering from incidents.

Data security addresses protecting data from unauthorized access and breaches, both when stored and during transmission. Vendor management looks at the risks that suppliers and partners bring to systems and data, ensuring they meet security requirements and are monitored. Incident response planning establishes the steps the organization will take to quickly detect, contain, eradicate, and recover from security incidents.

Homeopathy training does not relate to technology risk management; it deals with clinical practice rather than protecting IT systems, data, or service delivery processes. That’s why it isn’t typically included.