Certified Information Systems Auditor (CISA) — Question 32

Which of the following would be of GREATEST concern if noted during an audit of compliance with licensing agreements?

Answer options

• A. Distribution software is only maintained on a centralized server.
• B. The software vendor required monthly verification of licenses.
• C. Desktop software is personally expensed and not capitalized.
• D. The organization does not monitor upgrades to its software.

Correct answer: D

Explanation

The correct answer is D because not monitoring upgrades can lead to using outdated or unlicensed software, which poses significant compliance risks. Options A, B, and C, while they may indicate areas of concern, do not directly impact the organization's compliance with licensing agreements as critically as failing to monitor software upgrades.