Certified Information Systems Auditor (CISA) — Question 1213

What would be an IS auditor's GREATEST concern when conducting an internal audit of a project to implement a customer relationship management (CRM) system?

Answer options

• A. Lack of stakeholder agreement on business requirements
• B. Additional budget required for project implementation
• C. Lack of a post-implementation review
• D. Extended project scope beyond the design phase

Correct answer: A

Explanation

The greatest concern for an IS auditor is the lack of stakeholder agreement on business requirements, as this can lead to misalignment of the project objectives with business needs, ultimately affecting the project's success. While additional budget, lack of a post-implementation review, and extended project scope are important issues, they are secondary compared to the foundational necessity of stakeholder agreement.