Which of the following is the MOST useful information for an IS auditor to review when formulating an audit plan for the organization's outsourced service provider?
Which of the following is the MOST useful information for an IS auditor to review when formulating an audit plan for the organization's outsourced service provider?
Independent audit reports are the most useful information for an IS auditor when formulating an audit plan for the organization's outsourced service provider. These reports are prepared by external auditors and provide an impartial assessment of the service provider's controls and compliance with relevant standards and regulations. Unlike internal documents, such as SLAs or control self-assessments, independent audit reports offer a higher degree of reliability and credibility, which is crucial for effective audit planning.
why not A?
I would have to say A as well, as the SLA would provide agreed upon perform metrics