Câu 194: CISA: Certified Information Systems Auditor

Which of the following will be the MOST effective method to verify that a service vendor keeps control levels as required by the client?

1. A. Obtain evidence of the vendor's control self-assessment (CSA).
2. B. Periodically review the service level agreement (SLA) with the vendor.
3. C. Conduct periodic on-site assessments using agreed-upon criteria. — đáp án hiện tại
4. D. Conduct an unannounced vulnerability assessment of vendor's IT systems.