Certified in Risk and Information Systems Control (CRISC) — Question 631

An organization is planning to outsource its payroll function to an external service provider. Which of the following should be the MOST important consideration when selecting the provider?

Answer options

• A. Transparency of key performance indicators (KPIs)
• B. Right to audit the provider
• C. Disaster recovery plan (ORP) of the system
• D. Internal controls to ensure data privacy

Correct answer: B

Explanation

The ability to audit the provider is crucial as it ensures that the organization can verify compliance and performance standards. While transparency of KPIs, disaster recovery plans, and internal controls are important, they do not provide the same level of oversight and accountability as the right to audit.