An Internal Auditor Performed a Review of IT Outsourcing and Found

question 56

Multiple Choice

An internal auditor performed a review of IT outsourcing and found that the service provider was failing to meet the terms of the service level agreement. Which of the following approaches is most appropriate to address this concern?

• A) The organization should review the skill requirements and ensure that the service provider is maintaining sufficient expertise and retaining skilled resources.
• B) The organization should proactively monitor the performance of the service provider, escalate concerns, and use penalty clauses in the contract where necessary.
• C) The organization should ensure that there is a clear management communication strategy and path for evaluating and reporting on all outsourced services concerns.
• D) The organization should work with the service provider to review the current agreement and expectations relating to objectives, processes, and overall performance.

---

Definitions:

Existing Table

Refers to a data table that has already been created within a database or spreadsheet program.

Lookup Field

A field in a database or spreadsheet that retrieves data from another table or list based on a specified criterion.

Data Types

Data types refer to the classification of data items. It tells the compiler or interpreter how the programmer intends to use the data.

Update Query

A database operation that modifies the values of specified fields in existing records based on certain criteria.