Instructions You are expected to read the article titled: Risk mitigation in IT outsourcing strategy revisited: longitudinal case research at LISA, and answer the case study questions in the next section. Your answers must be contextualized for the case organization (LISA). You are expected to use knowledge from previous chapters covered. I shall post additional reading articles, which will help cite relevant literature. Resources from the study text, CISA Review Manual, and the research articles should be the primary sources of resources.

Case questions:

 1. What are the key risks in outsourcing information technology for a company such as LISA? 

2. How can LISA mitigate the risks? 

3. Draw a disaster recovery plan for LISA in case of a natural disaster (flood). 

4. As an IS auditor, what are your responsibilities under the existing law and the COSO framework to verify the effectiveness of LISA's internal controls relating to IT outsourcing?