Which of the following should be of primary concern of the auditor reviewing the management of external IT service providers?

Which of the following should be of PRIMARY concern to an IS auditor reviewing the management of external IT service providers?

A. Minimizing costs for the services provided

B. Prohibiting the provider from subcontracting services

C. Evaluating the process for transferring knowledge to the IT department

D. Determining if the services were provided as contracted

Which of the following should be the PRIMARY concern of an IS auditor during a review of an external IT service level agreement (SLA) for computer operations?

Nội dung chính

  • Which of the following should be of primary concern of the auditor reviewing the management of external IT service providers?
  • Which of the following should be of most concern to an IS auditor reviewing the BCP?
  • Which of the following risks should be assessed by an IS auditor reviewing an organization that uses cross training practices?
  • Which of the following should be of greatest concern to an IS auditor?

A. Changes in services are not tracked

B. Vendor has exclusive control of IT resources

C. Lack of software escrow provisions

D. No employee succession plan

Which of the following should be of PRIMARY concern to an IS auditor reviewing the management of external IT service providers?

A. Minimizing costs for the services provided

B. Prohibiting the provider from subcontracting services

C. Evaluating the process for transferring knowledge to the IT department

D. Determining if the services were provided as contracted

Which of the following should be of PRIMARY concern to an IS auditor reviewing the management of external IT service providers?

A.
Minimizing costs for the services provided

B.
Prohibiting the provider from subcontracting services

C.
Evaluating the process for transferring knowledge to the IT department

D.
Determining if the services were provided as contracted

Explanation:
From an IS auditor’s perspective, the primary objective of auditing the management of service providers should be to determine if the services that were requested were provided in a way that is acceptable, seamless and in line with contractual agreements. Minimizing costs, if applicable and achievable (depending on the customer’s need) is traditionally not part of an IS auditor’s job. This would normally be done by a line management function within the IT department. Furthermore, during an audit, it is too late to minimize the costs for existing provider arrangements. Subcontracting providers could be a concern, but it would not be the primary concern. Transferring knowledge to the internal IT department might be desirable under certain circumstances, but should not be the primary concern of an IS auditor when auditing IT service providers and the management thereof.

Which of the following should be of primary concern of the auditor reviewing the management of external IT service providers?

C. D. Explanation: From an IS auditor's perspective, the primary objective of auditing the management of service providers should be to determine if the services that were requested were provided in a way that is acceptable, seamless and in line with contractual agreements.

Which of the following should be of most concern to an IS auditor reviewing the BCP?

Explanation: If nobody declares the disaster, the response and recovery plan would not be invoked, making all other concerns mute. Although failure to consider duration could be a problem, it is not as significant as scope, and neither is as critical as the need to have someone invoke the plan.

Which of the following risks should be assessed by an IS auditor reviewing an organization that uses cross training practices?

An IS auditor reviewing an organization that uses cross-training practices should assess the risk of. Options are : a disruption of operations.

Which of the following should be of greatest concern to an IS auditor?

Lack of reporting of a successful attack on the network is a great concern to an IS auditor.

What is an IS auditor's primary concern during an audit?

While conducting an audit of a service provider, an IS auditor observes that the service provider has outsourced a part of the work to another provider. Because the work involves confidential information, the IS auditor's PRIMARY concern should be that the: requirement for protecting confidentiality of information can be compromised.

Which conclusion by an assessor of the internal audit activity most likely include?

The conclusion by an assessor of the internal audit activity is most likely to include A rating scale used to show the degree of conformance. A rating scale may be used in an external assessment to show the degree of conformance with the Standards by an internal audit activity.

Which are designed to provide feedback on the effectiveness of Internal Audit?

Which of the following are designed to provide feedback on the effectiveness of an internal audit activity? 1. Proper supervision 2. Proper training 3. Internal reviews 4. External reviews The organization's core values, mission, and vision statements. An individual became head of the internal audit activity of an organization 1 week ago.

When must an internal auditor seek agreement with management?

If en engagement client's operating standards are vague and thus subject to interpretation, the internal auditor must Seek agreement with management as to the criteria to be used to measure operating performance. An example of an assurance service is a(n)