Question 443:
A bank`s web-hosting provider has just completed an internal IT security audit and provides only a summary of the findings to the bank`s auditor. Which of the following should be the bank`s GREATEST concern?
Answer options:
A. The bank`s auditors are not independent of the service provider B. The audit scope may not have addressed critical areas C. The audit may be duplicative of the bank`s internal audit procedures D. The audit procedures are not provided to the bank