Isaca Certified Information Systems Auditor CISA Question # 59 Topic 6 Discussion
CISA Exam Topic 6 Question 59 Discussion:
Question #: 59
Topic #: 6
What would be an IS auditor ' s BEST recommendation upon finding that a third-party IT service provider hosts the organization ' s human resources (HR) system in a foreign country?
The best recommendation for an IS auditor when finding that a third-party IT service provider hosts the organization’s HR system in a foreign country is to conduct a privacy impact analysis. A privacy impact analysis is a systematic process that identifies and evaluates the potential risks and impacts of collecting, using, disclosing, and storing personal information. A privacy impact analysis will help the IS auditor to assess the legal, regulatory, contractual, and ethical obligations of the organization and the service provider regarding the protection of personal information. A privacy impact analysis will also help to identify and mitigate any privacy risks and gaps in the service level agreement. References:
CISA Certification | CertifiedInformation Systems Auditor | ISACA
CISA Questions, Answers and Explanations Database
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit