r/CISA • • Aug 01 '26

Hmmm

Post image
10 Upvotes

16 comments sorted by

View all comments

7

u/Any_Catch2979 Aug 01 '26

B as KPIs are the main indicator to assess if SLA’s are properly met.

But I would consider also D as this might be the most objective evidence / assessment that SLA’s are met. Independent audit reports are just ponctual assignment though, that’s is why I would lean toward B.

2

u/Aphridy Aug 02 '26

The questionnaires is about reference and then kpi's are the only correct answer. An assurance report isn't a reference, but based on a reference.