السؤال — عربي
: تدرس منظمة الاستعانة بمصادر خارجية لخدمات تكنولوجيا المعلومات، ويقوم المدقق الداخلي بتقييم المخاطر ذات الصلة. قام المدقق بتجميع المخاطر ذات الصلة في ثلاث فئات: مخاطر خاصة بالمنظمة نفسها، مخاطر خاصة بمزود الخدمة، ومخاطر مشتركة بين المنظمة ومزود الخدمة. أي من المخاطر التالية يجب على المدقق تصنيفها على أنها خاصة بمزود الخدمة؟
Question — English
An organization is considering outsourcing its IT services, and the internal auditor as assessing the related risks. The auditor grouped the related risks into three categories; - Risks specific to the organization itself. - Risks specific to the service provider. - Risks shared by both the organization and the service provider Which of the following risks should the auditor classify as specific to the service provider?
الخيارات — عربي
Options — English
💡 Risks specific to the service provider are those that arise from
their internal operations, which can affect their ability to deliver
services effectively. Inadequate staffing is a risk controlled by the
service provider, as it relates to their ability to hire, train, and
retain qualified IT personnel.