QuestionQ43Verified/Information System Auditing ProcessCopy linkReport a problemAsk AstroTutorSave questionWhen auditing a third-party provider, it is MOST important to ensure:Athe service level agreement (SLA) is monitored.Bitems identified in the risk assessment have been addressed.Ca vendor monitoring process has been implemented.Da vendor relationship manager is assigned.Show AnswerAnswerExplanationA third-party audit should verify that risks identified in the risk assessment have been addressed through appropriate controls, mitigation, acceptance, or other risk-treatment actions. The other practices support ongoing vendor oversight but do not directly demonstrate that identified risks have been resolved.Show comments1Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion