CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1704

Governance

Which item is MOST important to review when assessing whether a prospective IT service provider’s control environment is effective?

  • A Control self-assessment (CSA)
  • B Service level agreements (SLAs)
  • C Key performance indicators (KPIs)
  • D Independent audit report
Explanation

An independent audit report provides objective third-party assurance about a service provider’s control environment, including whether relevant controls are suitably designed and operating effectively. SLAs and KPIs measure agreed service delivery and performance, while a control self-assessment is not independent assurance.

Community Discussion

No comments yet. Be the first to start the discussion!