Isaca CISA Quiz 243 Topic 8 Questions 1211-1215

Question: 1

An IS auditor has been assigned to review IT structures and activities recently outsourced to various providers. Which of the following should the IS auditor determine FIRST?

AThat an audit clause is present in all contracts

BThat theSLA of each contract is substantiated by appropriate KPIs

CThat the contractual warranties of the providers support the business needs of the organization

DThat at contract termination, support is guaranteed by each outsourcer for new outsourcers

Show Answer

Question: 2

With respect to the outsourcing of IT services, which of the following conditions should be of GREATEST concern to an IS auditor?

AOutsourced activities are core and provide a differentiated advantage to the organization.

BPeriodic renegotiation is specified in the outsourcing contract.

CThe outsourcing contract fails to cover every action required by the arrangement.

DSimilar activities are outsourced to more than one vendor.

Show Answer

Question: 3

While conducting an audit of a service provider, an IS auditor observes that the service provider has outsourced a part of the work to another provider. Since the work involves confidential information, the IS auditor's PRIMARY concern shouldbe that the:

Arequirement for protecting confidentiality of information could be compromised.

Bcontract may be terminated because prior permission from the outsourcer was not obtained.

Cother service provider to whom work has been outsourced is not subject to audit.

Doutsourcer will approach the other service provider directly for further work.

Show Answer

Question: 4

Which of the following is the BEST information source for management to use as an aid in the identification of assets that are subject to laws and regulations?

ASecurity incident summaries

BVendor best practices

CCERT coordination center

DSignificant contracts

Show Answer

Question: 5

An organization has outsourced its help desk activities. An IS auditor's GREATEST concern when reviewing the contract and associated service level agreement (SLA) between the organization and vendor should be the provisions for:

Adocumentation of staff background checks.

Bindependent audit reports or full audit access.

Creporting the year-to-year incremental cost reductions.

Dreporting staff turnover, development or training.

Show Answer

Isaca CISA Quiz:243 Topic:8 Questions:1211-1215