A bank’s web-hosting provider has just completed an internal IT security audit and provides only a summary of the findings to the bank’s auditor. Which of the following should be the bank’s GREATEST concern?

December 16, 2021 by Admin

A bank’s web-hosting provider has just completed an internal IT security audit and provides only a summary of the findings to the bank’s auditor. Which of the following should be the bank’s GREATEST concern?

  • The bank’s auditors are not independent of the service provider
  • The audit scope may not have addressed critical areas
  • The audit may be duplicative of the bank’s internal audit procedures
  • The audit procedures are not provided to the bank

Leave a Reply