IIA
IIA-CIA-PART3 · Question #89
IIA-CIA-PART3 Question #89: Real Exam Question with Answer & Explanation
The correct answer is D. Violation of contractual terms.. See the full explanation below for the reasoning.
Question
An organization is considering outsourcing its IT services, and the internal auditor as assessing the related risks. The auditor grouped the related risks into three categories; - Risks specific to the organization itself. - Risks specific to the service provider. - Risks shared by both the organization and the service provider Which of the following risks should the auditor classify as specific to the service provider?
Options
- AUnexpected increases in outsourcing costs.
- BLoss of data privacy.
- CInadequate staffing.
- DViolation of contractual terms.
Community Discussion
No community discussion yet for this question.