Which of the following should be the FIRST step when planning an IS audit of a third-party service provider that monitors network activities?

A. Determine if the organization has a secure connection to the provider.

B. Review the roles and responsibilities of the third- party provider.

C. Evaluate the organization's third-party monitoring process.

D. Review the third party's monitoring logs and incident handling.








 

Suggested Answer: B

Community Answer: B



This question is in CISA Certified Information Systems Auditor Exam
For getting Certified Information Systems Auditor (CISA) Certificate










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.