List of questions
Related questions
Question 753 - CISSP discussion
An organization is outsourcing its payroll system and is requesting to conduct a full audit on the thirdparty information technology (IT) systems. During the due diligence process, the third party provides previous audit report on its IT system.
Which of the following MUST be considered by the organization in order for the audit reports to be acceptable?
A.
The audit assessment has been conducted by an independent assessor.
B.
The audit reports have been signed by the third-party senior management.
C.
The audit reports have been issued in the last six months.
D.
The audit assessment has been conducted by an international audit firm.
Your answer:
0 comments
Sorted by
Leave a comment first