nerdexam
IIA

IIA-CIA-PART3 · Question #89

An organization is considering outsourcing its IT services, and the internal auditor as assessing the related risks. The auditor grouped the related risks into three categories; - Risks specific to…

The correct answer is D. Violation of contractual terms. You've hit your session limit · resets 10:20pm (America/New_York)

Question

An organization is considering outsourcing its IT services, and the internal auditor as assessing the related risks. The auditor grouped the related risks into three categories;

  • Risks specific to the organization itself.
  • Risks specific to the service provider.
  • Risks shared by both the organization and the service provider

Which of the following risks should the auditor classify as specific to the service provider?

Options

  • AUnexpected increases in outsourcing costs.
  • BLoss of data privacy.
  • CInadequate staffing.
  • DViolation of contractual terms.

How the community answered

(16 responses)
  • A
    13% (2)
  • B
    13% (2)
  • C
    6% (1)
  • D
    69% (11)

Explanation

You've hit your session limit · resets 10:20pm (America/New_York)

Community Discussion

No community discussion yet for this question.

Full IIA-CIA-PART3 Practice