An Internal Auditor Performed a Review of IT Outsourcing and Found

question 56

Multiple Choice

An internal auditor performed a review of IT outsourcing and found that the service provider was failing to meet the terms of the service level agreement. Which of the following approaches is most appropriate to address this concern?

• A) The organization should review the skill requirements and ensure that the service provider is maintaining sufficient expertise and retaining skilled resources.
• B) The organization should proactively monitor the performance of the service provider, escalate concerns, and use penalty clauses in the contract where necessary.
• C) The organization should ensure that there is a clear management communication strategy and path for evaluating and reporting on all outsourced services concerns.
• D) The organization should work with the service provider to review the current agreement and expectations relating to objectives, processes, and overall performance.