Câu 144: IIA-CIA-PART3: Certified Internal Auditor - Part 3 Business Analysis and Information Technology

An organization is considering outsourcing its IT services, and the internal auditor is assessing the related risks. The auditor grouped the related risks into three categories:- Risks specific to the organization itself.- Risks specific to the service provider.- Risks shared by both the organization and the service provider. Which of the following risks should the auditor classify as specific to the service provider?

1. A. Unexpected increases in outsourcing costs.
2. B. Loss of data privacy.
3. C. Inadequate staffing. — đáp án hiện tại
4. D. Violation of contractual terms.