Certified Information Systems Auditor (CISA) — Question 449

Which of the following is MOST important for an IS auditor to confirm when reviewing an organization's plans to implement robotic process automation (RPA) to automate routine business tasks?

Answer options

• A. A benchmarking exercise of industry peers who use RPA has been completed.
• B. The end-to-end process is understood and documented.
• C. A request for proposal (RFP) has been issued to qualified vendors.
• D. Roles and responsibilities are defined for the business processes in scope.

Correct answer: B

Explanation

The correct answer is B because understanding and documenting the end-to-end process is crucial for successful RPA implementation. Without a clear view of the processes, it becomes challenging to identify automation opportunities or assess the impact of RPA. Options A, C, and D, while important, do not directly address the necessity of having a comprehensive understanding of the processes involved.