Watch this video on YouTube
When conducting an audit of a service provider, what should be the IS auditor's primary concern when the provider has outsourced part of the work involving confidential information?