Practice Test GeeksCISA - Certified Information Systems Auditor Practice Test
← All CISA Flashcard Decks

System Development and Implementation Flashcards

7 cards from real CISA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 System Development and Implementation flashcards as text

  1. During a post-implementation review, an IS auditor finds that user acceptance testing (UAT) was bypassed due to project deadline pressure. What is the PRIMARY risk?

    Answer: Undiscovered defects may reach production

    Skipping UAT means business requirements may not be met and defects unknown to users can propagate into the live environment.

  2. Which SDLC phase is MOST concerned with translating business requirements into technical specifications?

    Answer: Systems design

    The systems design phase converts logical business requirements into detailed technical blueprints for developers.

  3. An IS auditor is reviewing a change management process. Which control BEST ensures only authorized changes reach production?

    Answer: Segregation of duties between developers and production migration staff

    Segregation of duties prevents developers from promoting their own code, ensuring an independent review before production migration.

  4. What does a Gantt chart PRIMARILY help an IS auditor assess during a systems development review?

    Answer: Project schedule and milestone adherence

    A Gantt chart visually represents task timelines and milestones, allowing auditors to assess schedule progress and delays.

  5. During testing, a developer discovers a critical defect but the project manager instructs the team to proceed to production anyway. The IS auditor's BEST response is to:

    Answer: Document the risk and escalate to senior management

    The auditor's role is to document findings and escalate unresolved risks through proper governance channels, not to override management decisions unilaterally.

  6. Which testing type validates that a new system does not adversely affect existing integrated systems?

    Answer: Regression testing

    Regression testing re-runs prior test cases to confirm that new changes have not broken existing functionality in interconnected systems.

  7. An organization migrates to a new ERP system using a phased approach. The PRIMARY advantage of this strategy over a big-bang cutover is:

    Answer: Reduced disruption and ability to isolate issues by module

    Phased implementation reduces risk by limiting scope at each stage, making it easier to identify and resolve problems without impacting the entire organization.