Q98
Single choice
Which of the following should be the FIRST step when planning an IS audit of a third-party service provider that monitors network activities?