An IS auditor notices that a corporation has contracted out software development to a startup company as a third party. Which of the following should the IS auditor advise the firm to implement in order to protect the investment they have made in software?
-
A
A high penalty clause should be included in the contract.
-
B
Due diligence should be performed on the software vendor.
-
C
A quarterly audit of the vendor facilities should be performed.
-
D
There should be a source code escrow agreement in place.