Certified Information Systems Auditor (CISA) — Question 1426

Which of the following would BEST determine whether a post-implementation review (PIR) performed by the project management office (PMO) was effective?

Answer options

• A. The review was performed by an external provider.
• B. Management approved the PIR report.
• C. Project outcomes have been realized.
• D. Lessons learned were implemented.

Correct answer: D

Explanation

The correct answer, D, indicates that the lessons learned from the PIR were put into practice, showing that the review had a tangible impact on future projects. Options A and B do not directly assess the effectiveness of the review itself, while C, although important, does not necessarily correlate with the review's effectiveness in improving processes.