Q). When auditing third-party service providers, an information systems auditor should be concentrate on which one of the follwoing?

A. Ownership of programs and files.
B. A statement of due care and confidentiality.
C. The capability for continued service in the event of a disaster.
D. All of the above.

Answer: D

An IS Auditor will have to take into account all of the above mentioned criteria. So the Correct Answer 'D".

More CISA Exam Questions >>

Software Inventory Programs , Software Controls , Auditing Around the Computer