Q15
Single choice
An auditor wants to get information about the operating effectiveness of controls addressing privacy, availability, and confidentiality of a service organization.
Which of the following can BEST help to gain the required information?