Câu 59: CISA: Certified Information Systems Auditor

A bank's web-hosting provider has just completed an internal IT security audit and provides only a summary of the findings to the bank's auditor. Which of the following should be the bank's GREATEST concern?

1. A. The audit scope may not have addressed critical areas. — đáp án hiện tại
2. B. The audit procedures are not provided to the bank.
3. C. The bank's auditors are not independent of the service provider.
4. D. The audit may be duplicative of the bank's internal audit procedures