CRISC: Certified in Risk and Information Systems Control

Periodic audits independently verify that outsourced service providers are following the enterprise’s required information security controls and policy obligations.