Certified Information Systems Auditor (CISA) — Question 141

An IS auditor notes the transaction processing times in an order processing system have significantly increased after a major release. Which of the following should the IS auditor review FIRST?

Answer options

• A. Capacity management plan
• B. Stress testing results
• C. Training plans
• D. Database conversion results

Correct answer: B

Explanation

The IS auditor should first review the Stress testing results because these tests are designed to identify how the system performs under heavy loads and could reveal whether the changes in the release affected performance. The other options, while relevant, do not address the immediate concerns related to transaction processing speed as directly as the stress testing results do.