ある組織がデータ処理機能をサービス プロバイダーにアウトソーシングしています。サービス プロバイダーが組織の目的を継続的に満たしているかどうかを最も適切に判断できるのは次のうちどれですか。
正解:C
Reviewing the performance against service level agreements (SLAs) would best determine whether the service provider continues to meet the organization's objectives, as SLAs define the expected level of service, quality, availability, and responsibilities of both parties. Assessment of the personnel training processes of the provider, adequacy of the service provider's insurance, and periodic audits of controls by an independent auditor are important aspects of outsourcing, but they do not directly measure the performance of the service provider against the organization's objectives. References: CISA Review Manual (Digital Version), Chapter
3, Section 3.5.2