Certified Information Systems Auditor (CISA) — Question 1025

An organization has introduced a capability maturity model to the system development life cycle (SDLC) to measure improvements. Which of the following is the BEST indication of successful process improvement?

Answer options

• A. Evaluation results align with defined business goals
• B. Processes demonstrate the mitigation of inherent business risk
• C. Evaluation results exceed process maturity benchmarks against competitors.
• D. Process maturity reaches the highest state of process optimization

Correct answer: A

Explanation

The correct answer, A, indicates that improvements are effectively contributing to the organization's objectives, which is a clear measure of success. Option B focuses on risk mitigation, which is important but not a direct measure of process improvement success. Option C compares results to competitors, which may not reflect internal improvements accurately. Option D, while indicating high maturity, does not guarantee alignment with business goals.