CISA Question 13

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B2

  An IS auditor's primary concern in an application review is to prevent operational, security, and compliance failures when the application goes live. A project can have a flawless, perfectly executed project plan (Option D) but still deliver an application that is highly insecure or fails to process transactions correctly. Conversely, even if a project plan was poorly managed, thorough acceptance testing (Option B) acts as the final gatekeeper to ensure that defects and control gaps are identified and remediated before implementation.

• Chose D2

  The auditor will gain an understanding of the software and its relevant controls only by reviewing the project plan.

• Chose B3

  Acceptance testing