Exam IIA-CIA-Part2 topic 2 question 83 discussion

Actual exam question from IIA's IIA-CIA-Part2

Question #: 83
Topic #: 2

In a review of an electronic data interchange application using a third-party service provider, the auditor should:
I. Ensure encryption keys meet International Organization for Standardization (ISO) standards.
II. Determine whether an independent review of the service provider's operation has been conducted.
III. Verify that only public-switched data networks are used by the service provider.
IV. Verify that the service provider's contracts include necessary clauses, such as the right to audit.

A. I and II only
B. I and IV only
C. II and III only
D. II and IV only

Show Suggested Answer

Suggested Answer: D 🗳️

by Kate at Jan. 21, 2020, 1:28 p.m.

Comments

Submit Cancel

Kate

3 years, 1 month ago

Why is this the answers

upvoted 1 times

John1237

12 months ago

Risks associated with outsourcing threaten the organization. Third-party service providers must be independently audited. This must be included in the contractual clauses so that there is no ambiguity.

upvoted 1 times

...

az_zu

2 years, 6 months ago

It is crucial for IA to know that they can audit a service provider, check that the contract is compiled with and that the service provider has done a review of themselves to ensure they are operating effectively (i.e SOX reports)

upvoted 1 times

...