Certified Information Systems Auditor (CISA) — Question 1448

Which of the following is the PRIMARY reason for an IS auditor to conduct post-implementation reviews?

Answer options

• A. To document lessons learned to improve future project delivery
• B. To align project objectives with business needs
• C. To determine whether project objectives in the business case have been achieved
• D. To ensure key stakeholder sign-off has been obtained

Correct answer: C

Explanation

The correct answer is C because the primary goal of a post-implementation review is to evaluate if the project's objectives, as stated in the business case, have been fulfilled. Options A, B, and D are important, but they serve as secondary considerations in the context of the primary aim of verifying project outcomes.