Certified Information Systems Auditor (CISA) — Question 1151

A finance department has a two-year project to upgrade the enterprise resource planning (ERP) system hosting the general ledger. In year one, the system version upgrade will be applied, and in year two, business processes will be updated to implement new system functionality. Which of the following should be the PRIMARY focus of an IS auditor reviewing the second year of the implementation?

Answer options

• A. Data migration
• B. Sociability testing
• C. User acceptance testing (UAT)
• D. Initial user access provisioning

Correct answer: C

Explanation

The primary focus for the IS auditor should be on User Acceptance Testing (UAT) because it verifies that the business processes align with the newly implemented system functionalities. Data migration, sociability testing, and initial user access provisioning are important but secondary to ensuring that users can effectively utilize the new features of the upgraded ERP system.