Certified Information Systems Auditor (CISA) — Question 1059

Shortly after a system was deployed into production, it was identified that some key scenarios were not tested during user acceptance testing (UAT). Which of the following is the GREATEST concern with this situation?

Answer options

• A. The system may have gone into production with defects.
• B. System functions may not meet business requirements.
• C. Significant security risks may not have been assessed.
• D. Extra funding may be required to complete the testing.

Correct answer: B

Explanation

The greatest concern is that system functions may not meet business requirements, as this can lead to significant operational issues and failure to achieve business goals. While defects, security risks, and funding issues are important, they are secondary to ensuring the system meets the fundamental needs of the business.