Which of the following is not true?
A. Management may outsource their organizations' IT functions, but they cannot outsource their management responsibilities for internal control.
B. Section 404 requires the explicit testing of outsourced controls.
C. The SSAE 16 report, which is prepared by the outsourcer's auditor, attests to the adequacy of the vendor's internal controls.
D. Auditors issue two types of SSAE 16 reports: Type I report and Type II report.
Answer: C
You might also like to view...
One way to give text a unique look is to ____ it with an image, pattern, or gradient.
a. resolve b. fill c. clip d. stroke
Single-core and multi-core processors use ________ to process instructions in an assembly-line fashion
Fill in the blank(s) with correct word
The reason the value displayed in fields on a form change when the data in the table changes is that the fields on a form are bound controls
Indicate whether the statement is true or false
Almost all aspects of a company's environment are __________, meaning threats that were originally assessed in the early stages of the project's systems development life cycle have probably changed and new priorities have emerged.
Fill in the blank(s) with the appropriate word(s).