ISACA IT Acquisition, Development, and Implementation 3

Question 1

When evaluating vendor proposals during system acquisition, what should an IS auditor verify is included in the RFP (Request for Proposal)?

Accepted Answer

Security, compliance, and audit requirements

Answer

Including security, compliance, and audit requirements in the RFP ensures vendors understand and commit to these critical obligations from the outset of the relationship.

Question 2

What does 'parallel operation' mean in the context of a system cutover strategy?

Accepted Answer

Both the old and new systems run concurrently for a validation period

Answer

Parallel operation runs both the legacy and new system simultaneously so organizations can verify the new system produces correct results before fully decommissioning the old one.

Question 3

A change advisory board (CAB) is PRIMARILY responsible for which activity?

Accepted Answer

Reviewing and authorizing change requests prior to implementation

Answer

The CAB reviews change requests and authorizes implementation, ensuring each change is evaluated for risk, business impact, and necessity before proceeding.

Question 4

Which rollback procedure consideration is MOST critical before executing a production system upgrade?

Accepted Answer

Whether the rollback procedure has been tested and a documented fallback plan exists

Answer

Testing the rollback procedure before go-live ensures the organization can reliably revert to the prior stable state if the upgrade fails.

Question 5

In IT governance and change management, the RACI model is used to define which of the following?

Accepted Answer

Responsible, Accountable, Consulted, and Informed roles

Answer

RACI stands for Responsible, Accountable, Consulted, and Informed — a framework that clearly defines roles and responsibilities for each activity in a process.

(ISACA) Information Systems Audit and Control Association Certification Practice Test

(ISACA) Information Systems Audit and Control Association Certification Practice Test

ISACA IT Acquisition, Development, and Implementation 3