After the merger of two organizations, multiple self-developed legacy applications from both
companies are to be replaced by a new common platform. Which of the following would be the
GREATEST risk?

Which of the following is the MOST important function to be performed by IS management when a
service has been outsourced?

Is it appropriate for an IS auditor from a company that is considering outsourcing its IS processing to
request and review a copy of each vendor’s business continuity plan?

An IS auditor reviewing an outsourcing contract of IT facilities would expect it to define the:

When performing a review of the structure of an electronic funds transfer (EFT) system, an IS auditor
observes that the technological infrastructure is based on a centralized processing scheme that has
been outsourced to a provider in another country. Based on this information, which of the following
conclusions should be the main concern of the IS auditor?

An IS auditor should expect which of the following items to be included in the request for proposal
(RFP) when IS is procuring services from an independent service provider (ISP)?

To minimize costs and improve service levels an outsourcer should seek which of the following
contract clauses?

When an organization is outsourcing their information security function, which of the following
should be kept in the organization?

An IS auditor has been assigned to review IT structures and activities recently outsourced to various
providers. Which of the following should the IS auditor determine FIRST?

With respect to the outsourcing of IT services, which of the following conditions should be of
GREATEST concern to an IS auditor?