Certified Information Systems Auditor (CISA) — Question 1197

An IS auditor is reviewing an artificial intelligence (AI) and expert system application. The system has produced several critical errors with severe impact. Which of the following should the IS auditor do NEXT to understand the cause of the errors?

Answer options

• A. Review the decision-making logic built into the system.
• B. Verify system adherence to corporate policy.
• C. Understand the purpose and functionality of the system.
• D. Interview the system owner.

Correct answer: A

Explanation

The correct answer is A because reviewing the decision-making logic will directly reveal how the system arrived at its conclusions and identify any flaws. Options B and C, while important, do not specifically address the immediate need to understand the root cause of critical errors, and option D, although useful for context, would not provide the technical insight necessary to diagnose the errors.