Certified Internal Auditor (CIA) Part 3: Business Knowledge for Internal Auditing — Question 187

Which of the following statements is true regarding user-developed applications (UDAs) and traditional IT applications?

Answer options

• A. UDAs and traditional IT applications typically follow a similar development life cycle.
• B. A UDA usually includes system documentation to illustrate its functions, and IT-developed applications typically do not require such documentation.
• C. Unlike traditional IT applications, UDAs typically are developed with little consideration of controls.
• D. IT testing personnel usually review both types of applications thoroughly to ensure they were developed properly.

Correct answer: C

Explanation

Option C is correct because user-developed applications often lack formal control measures compared to traditional IT applications, which are usually developed with a structured approach to controls. The other options are incorrect as they either misrepresent the development processes or the documentation requirements associated with UDAs and traditional IT applications.