Certified Information Systems Auditor CISA · Free Practice Question Medium
Question 78
You are an information system auditor of HDA Inc., and you are auditing the effectiveness of information security controls implemented by a third-party service provider. What provides the best evidence that the service provider's information security controls are effective?
- A A. Information system audit report of the service provider by an independent auditor
- B B. Testimonials from the service provider's clients
- C C. Compliance certificates obtained by the service provider
- D D. Self-assessment questionnaire completed by the service provider
Reveal correct answer
Correct answer: A
Explanation
Correct Answer: A. Information system audit report of the service provider by an independent auditor Explanation: The best evidence to determine the effectiveness of a third-party service provider's information security controls is an information system audit report conducted by an independent auditor. An independent auditor provides an objective and unbiased assessment of the service provider's controls, processes, and compliance with relevant standards and regulations. The audit report evaluates the adequacy and effectiveness of the information security controls in place, identifies any vulnerabilities or weaknesses, and provides recommendations for improvement. It offers a comprehensive and reliable assessment of the service provider's information security posture. On the other hand, testimonials from the service provider's clients, compliance certificates obtained by the service provider, and self-assessment questionnaires completed by the service provider may provide some insights but do not offer the same level of assurance and independent verification as an information system audit report conducted by an independent auditor. Therefore, the information system audit report of the service provider by an independent auditor is the BEST evidence to evaluate the effectiveness of the service provider's information security controls.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
