CISA Certified Information Systems Auditor – Question2633

Which of the following is the MOST effective way to assess whether an outsourcer’s controls are following the service level agreement (SLA)?

A.
Perform an onsite review of the outsourcer.
B. Review the outsourcer’s monthly service reports.
C. Perform a review of penalty clauses for non-performance.
D. Review an internal audit report from the outsourcer’s auditor.

Correct Answer: A