Question

While conducting an IS audit of a service provider for a government program involving confidential information, an IS auditor noted that the service provider delegated a part of the IS work to another subcontractor. Which of the following provides the MOST assurance that the requirements for protecting confidentiality of information are met?Select an answer:A.Monthly committee meetings include the subcontractor's IS managerB.Management reviews weekly reports from the subcontractorC.Permission is obtained from the government agent regarding the contractD.Periodic independent audit of the work delegated to the subcontractor

Answer 1

The answer is letter D

Step-by-step explanation:

Periodic independent audit of the work delegated to the subcontractor.

Because this is the guideline to garantee accountability, good governance, and transparency. In adittion, to provide more assurance for the protecting confidentiality of the information.