Certified Information Systems Auditor (CISA) — Question 1430

Which of the following would be MOST useful to an IS auditor confirming that an IS department meets its service level agreements (SLAs)?

Answer options

• A. System utilization reports
• B. Capacity planning tools
• C. System downtime reports
• D. IS strategic plan

Correct answer: C

Explanation

The correct answer is C, as system downtime reports provide direct evidence of whether the service levels agreed upon are being met. Options A and B focus on resource usage and future capacity, which do not directly reflect compliance with SLAs. Option D is more about long-term goals rather than operational performance against SLAs.