QuestionQ21

Privacy Operational Lifecycle: Assess

Which of the following is a typical disadvantage of a third-party audit?

  • A It identifies weaknesses of internal controls.
  • B It lends credibility to an internal audit program.
  • C It requires a learning curve about the organization.
  • D It provides a level of unbiased, expert recommendations.
Explanation

A third-party auditor begins without the organization-specific knowledge held by internal staff, so time is required to understand its structure, processes, controls, and environment. This learning curve can increase the effort and time needed for the audit.

Community Discussion

No comments yet. Be the first to start the discussion!