Certified Information Systems Auditor (CISA) — Question 293

An organization's enterprise architecture (EA) department decides to change a legacy system's components while maintaining its original functionality. Which of the following is MOST important for an IS auditor to understand when reviewing this decision?

Answer options

• A. The current business capabilities delivered by the legacy system
• B. The database entity relationships within the legacy system
• C. The proposed network topology to be used by the redesigned system
• D. The data flows between the components to be used by the redesigned system

Correct answer: A

Explanation

The most crucial aspect for an IS auditor to grasp is the current business capabilities delivered by the legacy system, as this ensures that the essential functions remain intact during the update. Understanding database entity relationships, network topology, and data flows is also important, but they are secondary to maintaining the core business capabilities that the organization relies on.