An IS auditor has been assigned to review IT structures and activities recently outsourced to various providers.
Which of the following should the IS auditor determine FIRST?

A.
That an audit clause is present in all contracts

B.
That the SLA of each contract is substantiated by appropriate KPIs

C.
That the contractual warranties of the providers support the business needs of the organization

D.
That at contract termination, support is guaranteed by each outsourcer for new outsourcers

Explanation:
The complexity of IT structures matched by the complexity and interplay of responsibilities and warranties may
affect or void the effectiveness of those warranties and the reasonable certainty that the business needs will be
met. All other choices are important, but not as potentially dangerous as the interplay of the diverse and critical
areas of the contractual responsibilities of the outsourcers.