ExamGecko
Question list
Search
Search

List of questions

Search

Question 645 - IIA-CIA-Part1 discussion

Report
Export

Which of the following is an indicator of ineffective third-party risk management?

A.

Sourcing of third parties does not follow public procurement law.

Answers
A.

Sourcing of third parties does not follow public procurement law.

B.

Violations of service conditions trigger either fines or termination.

Answers
B.

Violations of service conditions trigger either fines or termination.

C.

Due diligence of third parties is conducted only after contract signing.

Answers
C.

Due diligence of third parties is conducted only after contract signing.

D.

The right-to-audit clause is limited by personal data protection regulations.

Answers
D.

The right-to-audit clause is limited by personal data protection regulations.

Suggested answer: C

Explanation:

Effective third-party risk management involves conducting thorough due diligence before entering into a contract to ensure that the third party meets the organization's standards and requirements. Conducting due diligence only after contract signing is a significant red flag, as it indicates that the organization might be engaging with third parties without fully understanding the associated risks. This can lead to inadequate risk management and potential issues with compliance, performance, and security.

Reference: The IIA's International Standards for the Professional Practice of Internal Auditing (Standards), specifically Standard 2210 - Engagement Objectives, and COSO's Enterprise Risk Management - Integrating with Strategy and Performance.

asked 03/11/2024
Lee, Eduardo
48 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first