CISA System Development and Implementation 3

Question 1

An IS auditor reviewing software procurement should FIRST verify that the vendor's product:

Accepted Answer

Meets the organization's defined functional and security requirements

Answer

Alignment with documented requirements is the foundational criterion before evaluating cost, market share, or technology features.

Question 2

Which of the following BEST describes the purpose of a program change log?

Accepted Answer

To provide an audit trail of all modifications made to production programs

Answer

A program change log maintains a chronological record of who changed what and when, forming the audit trail for production program modifications.

Question 3

During a SDLC audit, an IS auditor notices that requirements sign-off was obtained from IT management only, excluding business users. This represents a weakness in:

Accepted Answer

Requirements validation and stakeholder engagement

Answer

Requirements must be approved by business stakeholders who will use the system, not just IT, to ensure the solution meets actual business needs.

Question 4

A software development team uses an iterative methodology where working software is delivered in short cycles. This BEST describes:

Accepted Answer

Agile/Scrum development

Answer

Agile/Scrum delivers working software in short, time-boxed sprints with frequent stakeholder feedback and iterative refinement.

Question 5

When auditing a data conversion during system migration, the IS auditor should PRIMARILY verify that:

Accepted Answer

All data was accurately and completely transferred to the new system

Answer

Data integrity and completeness during conversion is critical; any data loss or corruption directly impacts business continuity and reliability of the new system.

CISA - Certified Information Systems Auditor Practice Test

CISA - Certified Information Systems Auditor Practice Test

CISA System Development and Implementation 3