Which of the following would BEST determine whether the service provider continues to meet the organization s objectives?

An organization has outsourced its data processing function to a service provider.

Which of the following would BEST determine whether the service provider continues to meet the organization s objectives?
A . Assessment of the personnel training processes of the provider
B . Adequacy of the service provider’s insurance
C . Review of performance against service level agreements (SLAs)
D . Periodic audits of controls by an independent auditor

View Answer

Answer: C

Explanation:

Reviewing the performance against service level agreements (SLAs) would best determine whether the service provider continues to meet the organization’s objectives, as SLAs define the expected level of service, quality, availability, and responsibilities of both parties. Assessment of the personnel training processes of the provider, adequacy of the service provider’s insurance, and periodic audits of controls by an independent auditor are important aspects of outsourcing, but they do not directly measure the performance of the service provider against the organization’s objectives.

References: CISA Review Manual (Digital Version), Chapter 3, Section 3.5.2