The BEST way for an IS auditor to determine which business processes are currently outsourced to a specific service provider is to review the:

A. enterprise architecture (EA) diagram.
B. service provider’s contract.
C. vendor management policy.
D. request for proposal (RFP) responses.