Certified Information Systems Auditor (CISA) — Question 123

During the implementation of an enterprise resource planning (ERP) system, an IS auditor is reviewing the results of user acceptance testing (UAT). The auditor's
PRIMARY focus should be to determine if:

Answer options

• A. application interfaces have been satisfactorily tested.
• B. all errors found in the testing process have been corrected.
• C. the business process owner has signed off on the results.
• D. system integration testing was performed.

Correct answer: C

Explanation

The correct answer is C because the sign-off from the business process owner indicates that the system meets their requirements and is ready for deployment. While options A, B, and D are important, they are secondary to ensuring that the business process owner has officially approved the results of the UAT.