Certified Information Systems Auditor (CISA) — Question 11

Prior to the migration of acquired software into production, it is MOST important that the IS auditor review the:

Answer options

• A. user acceptance test (UAT) report.
• B. vendor testing report.
• C. system documentation.
• D. source code escrow agreement.

Correct answer: A

Explanation

The user acceptance test (UAT) report is crucial because it verifies that the software meets the users' needs and requirements before going live. While the vendor testing report, system documentation, and source code escrow agreement are important, they do not directly confirm the software's acceptance by the end users, making the UAT report the most critical document to review.