Which of the following is to be done by the auditor while internet banking services audit?

• A. Tour the server room
• B. The user is not allowed to log – in after defined repeated failed attempts
• C. Contract clearly states the services that will be provided by the vendor
• D. All of these
• E. None of these