Certified Information Systems Auditor (CISA) — Question 250

When auditing the feasibility study of a system development project, the IS auditor should:

Answer options

• A. review the request for proposal (RFP) to ensure that it covers the scope of work.
• B. ensure that vendor contracts are reviewed by legal counsel.
• C. review cost-benefit documentation for reasonableness.
• D. review qualifications of key members of the project team.

Correct answer: C

Explanation

The correct answer is C because reviewing cost-benefit documentation is crucial to ensure that the project's financial justification is sound. Options A, B, and D, while important, do not directly assess the feasibility of the project's financial aspects, which is the primary focus during this stage.