Exam CISA Topic 4 Question 619 Discussion

Actual exam question for ISACA's CISA exam
Question #: 619
Topic #: 4
With respect to the outsourcing of IT services, which of the following conditions should be of GREATEST
concern to an IS auditor?

Suggested Answer: A Vote an answer

Section: Protection of Information Assets
Explanation:
An organization's core activities generally should not be outsourced, because they are what the
organization does best; an IS auditor observing that should be concerned. An IS auditor should not be
concerned about the other conditions because specification of periodic renegotiation in the outsourcing
contract is a best practice. Outsourcing contracts cannot be expected to cover every action and detail
expected of the parties involved, while multisourcing is an acceptable way to reduce risk.

by Donna at Jul 14, 2026, 07:20 PM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10