Certified Information Systems Auditor (CISA) — Question 1054

Which component of a business case provides the BEST indication that due diligence was performed during the vendor selection process?

Answer options

• A. Management approval
• B. Problem statement
• C. Alternative solutions
• D. Cost-benefit analysis

Correct answer: C

Explanation

The correct answer, C. Alternative solutions, shows that various options were considered and evaluated, indicating due diligence in the selection process. The other options, while important, do not specifically reflect the breadth of analysis that alternative solutions provide; management approval is a final step, the problem statement outlines the issue, and cost-benefit analysis assesses financial implications but does not encompass all vendor choices.