Câu 111: CISA: Certified Information Systems Auditor

Which of the following provides the BEST evidence that a third-party service provider's information security controls are effective?

1. A. Documentation of the service provider's security configuration controls
2. B. An audit report of the controls by the service provider's external auditor — đáp án hiện tại
3. C. An interview with the service provider's information security officer
4. D. A review of the service provider's policies and procedures