Certified Information Systems Auditor (CISA) — Question 1364

Which of the following should an IS auditor be MOST concerned with during a post-implementation review?

Answer options

• A. The system does not have a maintenance plan.
• B. The system contains several minor defects.
• C. The system deployment was delayed by three weeks.
• D. The system was over budget by 15%.

Correct answer: A

Explanation

The absence of a maintenance plan is critical as it can lead to long-term issues with system reliability and performance. While minor defects, deployment delays, and budget overruns are important, they are less critical compared to the need for ongoing maintenance to ensure the system's success and sustainability.