Certified Information Systems Auditor (CISA) — Question 1117

Which of the following is MOST helpful to a project manager in mitigating risk associated with frequent changes in project requirements?

Answer options

• A. Conducting post-implementation reviews
• B. Monitoring changes in risk factors
• C. Performing mid-term project reviews
• D. Implementing formal reviews of changes

Correct answer: D

Explanation

Implementing formal reviews of changes ensures that any adjustments to project requirements are thoroughly analyzed and assessed for their impact on the project, which helps in mitigating risks. The other options, while useful, do not directly address the need for structured oversight on changes, making them less effective in this context.