Certified Information Systems Auditor (CISA) — Question 1033

A project team has decided to switch to an agile approach to develop a replacement for an existing business application. Which of the following should an IS auditor do FIRST to ensure the effectiveness of the project audit?

Answer options

• A. Understand the specific agile methodology that will be followed.
• B. Interview business process owners to compile a list of business requirements.
• C. Compare the agile process with previous methodology.
• D. Identify and assess existing agile process controls.

Correct answer: A

Explanation

The correct answer is A because understanding the specific agile methodology is crucial for the auditor to effectively assess the project. Options B, C, and D are important but should come after establishing a clear understanding of the agile methodology being implemented.