Certified Information Systems Auditor (CISA) — Question 1283

When evaluating whether the expected benefits of a project have been achieved, it is MOST important for an IS auditor to review:

Answer options

• A. the project schedule.
• B. quality assurance (QA) results.
• C. post-implementation issues.
• D. the business case

Correct answer: D

Explanation

The correct answer is D because the business case outlines the rationale for the project and its expected benefits, making it crucial for determining if those benefits were achieved. The other options, while relevant, do not primarily focus on the justification for the project's existence and its anticipated returns.