The BEST way for an IS auditor to determine which business processes are currently outsourced to a specific service provider is to review the: 

Answer options:

A. enterprise architecture (EA) diagram.
B. service provider`s contract.
C. vendor management policy.
D. request for proposal (RFP) responses.

B