Certified Information Systems Auditor (CISA) — Question 363

Which of the following would be the BEST criteria for monitoring an IT vendor’s service levels?

Answer options

• A. Performance metrics
• B. Surprise visit to vendor
• C. Service auditor’s report
• D. Interview with vendor

Correct answer: A

Explanation

Performance metrics provide quantitative data that can be tracked over time, making them the best criterion for monitoring service levels. Other options, like surprise visits or interviews, may yield subjective insights but do not provide the consistent and measurable data necessary for thorough evaluation.