It is quite common for companies to outsource all or part of their IT department. As an internal auditor, how would you go about obtaining assurance that the company providing the IT services has adequate internal controls? Do some research. As part of your response, try to find an example(s) from the COSO Compendium Home. (Please avoid plagiarism.)