Certified Information Systems Auditor (CISA) — Question 405

An IS auditor is reviewing the deployment of a new automated system. Which of the following findings presents the MOST significant risk?

Answer options

• A. Users have not been trained on the new system.
• B. The new system is not platform agnostic.
• C. Data from the legacy system is not migrated correctly to the new system.
• D. The new system has resulted in layoffs of key experienced personnel.

Correct answer: C

Explanation

The most significant risk is related to option C, as improper migration of data from the legacy system can lead to data loss or corruption, severely affecting the system's functionality. While the other options also present risks, such as lack of training (A) and layoffs of personnel (D), they do not have an immediate impact on the integrity of the system's data, which is crucial for its operation.