Isaca Certified Information Systems Auditor CISA Question # 176 Topic 18 Discussion
CISA Exam Topic 18 Question 176 Discussion:
Question #: 176
Topic #: 18
An organization has outsourced its data processing function to a service provider. Which of the following would BEST determine whether the service provider continues to meet the organization s objectives?
A.
Assessment of the personnel training processes of the provider
B.
Adequacy of the service provider's insurance
C.
Review of performance against service level agreements (SLAs)
D.
Periodic audits of controls by an independent auditor
Reviewing the performance against service level agreements (SLAs) would best determine whether the service provider continues to meet the organization’s objectives, as SLAs define the expected level of service, quality, availability, and responsibilities of both parties. Assessment of the personnel training processes of the provider, adequacy of the service provider’s insurance, and periodic audits of controls by an independent auditor are important aspects of outsourcing, but they do not directly measure the performance of the service provider against the organization’s objectives. References: CISA Review Manual (Digital Version), Chapter 3, Section 3.5.2
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit