Câu 229: Isaca Certified in Risk and Information Systems Control

Which of the following will BEST help an organization evaluate the control environment of several third-party vendors?

1. A. Review vendors' performance metrics on quality and delivery of processes.
2. B. Review vendors' internal risk assessments covering key risk and controls.
3. C. Obtain independent control reports from high-risk vendors. — đáp án hiện tại
4. D. Obtain vendor references from third parties.