Câu 8: IIA-CIA-PART2: Certified Internal Auditor - Part 2 Conducting the Internal Audit Engagement

In a review of an electronic data interchange application using a third-party service provider, the auditor should:I. Ensure encryption keys meet International Organization for Standardization (ISO) standards.II. Determine whether an independent review of the service provider's operation has been conducted.III. Verify that only public-switched data networks are used by the service provider.IV. Verify that the service provider's contracts include necessary clauses, such as the right to audit.

1. A. I and II only
2. B. I and IV only
3. C. II and III only
4. D. II and IV only — đáp án hiện tại