CISA Question 358

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  The best approach to manage the risk of changes in requirements after the analysis phase is iterative development with continuous stakeholder engagement and prioritization of requirements. This allows for flexibility and adaptation as new needs arise, while minimizing the impact of changes on the project timeline and budget

• Chose C2

  While a Quality Assurance (QA) review (Option B) is important for ensuring that the developed application meets quality standards and requirements, it typically occurs after the development phase. Ongoing participation by relevant stakeholders, on the other hand, helps proactively manage changes in requirements before they impact the project timeline, budget, and scope. Therefore, it is the best approach for managing the risk of changes in requirements during business application development projects.

• 1

  C. Ongoing participation by relevant stakeholders