Certified Internal Auditor (CIA) Part 3: Business Knowledge for Internal Auditing — Question 219

Which of the following IT layers would require the organization to maintain communication with a vendor in a tightly controlled and monitored manner?

Answer options

• A. Applications.
• B. Technical infrastructure.
• C. External connections.
• D. IT management.

Correct answer: C

Explanation

The correct answer is C, as external connections often involve third-party vendors and require careful monitoring to ensure security and compliance. Options A, B, and D do not typically involve the same level of external vendor communication and oversight as external connections do.