Which of the following will be the MOST effective method to verify that a service vendor keeps control levels as required by the client?

• A.Conduct an unannounced vulnerability assessment of vendor's IT systems.
• B.Conduct periodic on-site assessments using agreed-upon criteria.
• C.Obtain evidence of the vendor's control self-assessment (CSA).
• D.Periodically review the service level agreement (SLA) with the vendor.

Comment: *

Name: *

Email: *

Verification: *

During a business process re-engineering (BPR) program, IT can assist with:

• A.total cost of ownership.
• B.focusing on value-added tasks.
• C.segregation of duties.
• D.streamlining of tasks.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the GREATEST concern associated with control self-assessments (CSAs)?

• A.Controls may not be assessed objectively
• B.Communication between operational management and senior management may not be effective
• C.The assessment may not provide sufficient assurance to stakeholders
• D.Employees may have insufficient awareness of controls

Comment: *

Name: *

Email: *

Verification: *

Which of the following would have the HIGHEST priority in a business continuity plan (BCP)?

• A.Resuming critical processes
• B.Recovering sensitive processes
• C.Restoring the site
• D.Relocating operations to an alternative site

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be of PRIMARY concern to an IS auditor reviewing the management of external IT service providers?

• A.Minimizing costs for the services provided
• B.Prohibiting the provider from subcontracting services
• C.Evaluating the process for transferring knowledge to the IT department
• D.Determining if the services were provided as contracted

Comment: *

Name: *

Email: *

Verification: *