Reader small image

You're reading from  CISA – Certified Information Systems Auditor Study Guide - Second Edition

Product typeBook
Published inJun 2023
PublisherPackt
ISBN-139781803248158
Edition2nd Edition
Right arrow
Author (1)
Hemang Doshi
Hemang Doshi
author image
Hemang Doshi

Hemang Doshi has more than 15 years of experience in the field of system audit, IT risk and compliance, internal audit, risk management, information security audit, third-party risk management, and operational risk management. He has authored several books for certification such as CISA, CRISC, CISM, DISA, and enterprise risk management.
Read more about Hemang Doshi

Right arrow

IT Service Provider Acquisition and Management

Outsourcing services to a third-party vendor is a widely accepted practice in today’s world for two major reasons. One of them is the tremendous savings in cost and the other is to avail the service of experts in the field.

CISA aspirants should be aware of the following important terms with respect to outsourcing:

  • Insourced: Activities performed by the organization’s own staff
  • Outsourced: Activities performed by the vendor’s staff
  • Hybrid: Activities performed jointly by staff from both the organization and the vendor
  • Onsite: Staff working onsite in the IT department
  • Offsite: Staff working from remote locations in the same geographical area
  • Offshore: Staff working from remote locations in different geographical areas

Evaluation Criteria for Outsourcing

CISA aspirants should understand the evaluation criteria for the outsourcing of any function. The following functions should...

lock icon
The rest of the page is locked
Previous PageNext Page
You have been reading a chapter from
CISA – Certified Information Systems Auditor Study Guide - Second Edition
Published in: Jun 2023Publisher: PacktISBN-13: 9781803248158

Author (1)

author image
Hemang Doshi

Hemang Doshi has more than 15 years of experience in the field of system audit, IT risk and compliance, internal audit, risk management, information security audit, third-party risk management, and operational risk management. He has authored several books for certification such as CISA, CRISC, CISM, DISA, and enterprise risk management.
Read more about Hemang Doshi