Q22
Single choice
Which of the following is MOST important to review when determining whether a potential IT service provider's control environment is effective?