Which of the following is not true?
A. Management may outsource their organizations' IT functions, but they cannot outsource their management responsibilities for internal control.
B. Section 404 requires the explicit testing of outsourced controls.
C. The SSAE 16 report, which is prepared by the outsourcer's auditor, attests to the adequacy of the vendor's internal controls.
D. Auditors issue two types of SSAE 16 reports: Type I report and Type II report.
Answer: C
You might also like to view...
A field ________ is a property that must be met before an entry can be accepted into the field
Fill in the blank(s) with correct word
Compared to Filter by Form, Filter by Selection:
A) can be used to filter several fields at the same time. B) does not allow as much flexibility. C) allows filters that require matching multiple values. D) can be used for more than one value in the same field.