An IS auditor should expect which of the following items to be included in the request for proposal
(RFP) when IS is procuring services from an independent service provider (ISP)?

To minimize costs and improve service levels an outsourcer should seek which of the following
contract clauses?

When an organization is outsourcing their information security function, which of the following
should be kept in the organization?

An IS auditor has been assigned to review IT structures and activities recently outsourced to
various providers. Which of the following should the IS auditor determine FIRST?

With respect to the outsourcing of IT services, which of the following conditions should be of
GREATEST concern to an IS auditor?

While conducting an audit of a service provider, an IS auditor observes that the service provider
has outsourced a part of the work to another provider. Since the work involves confidential

information, the IS auditor’s PRIMARY concern shouldbe that the:

Which of the following is the BEST information source for management to use as an aid in the
identification of assets that are subject to laws and regulations?

An organization has outsourced its help desk activities. An IS auditor’s GREATEST concern when
reviewing the contract and associated service level agreement (SLA) between the organization
and vendor should be the provisions for:

Which of the following is the MOST important IS audit consideration when an organization
outsources a customer credit review system to a third-party service provider? The provider:

The risks associated with electronic evidence gathering would MOST likely be reduced by an email: