CRISC: Certified in Risk and Information Systems ControlDemo

Question

An organization plans to outsource its payroll function to an external service provider. Which of the following should be the MOST important factor when choosing the provider?

A Transparency of key performance indicators (KPIs)
B Right to audit the provider
C Disaster recovery plan (ORP) of the system
D Internal controls to ensure data privacy

Explanation

A payroll service provider must have effective internal controls that protect employees’ sensitive personal and financial data. These controls are fundamental to maintaining confidentiality, meeting data-privacy obligations, and reducing the risk of unauthorized access or disclosure.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ669

Community Discussion