Certified Information Systems Auditor (CISA) — Question 459

An organization has outsourced the development of a core application. However, the organization plans to bring the support and future maintenance of the application back in-house. Which of the following findings should be the IS auditor's GREATEST concern?

Answer options

• A. The data model is not clearly documented.
• B. The vendor development team is located overseas.
• C. The cost of outsourcing is lower than in-house development.
• D. A training plan for business users has not been developed.

Correct answer: A

Explanation

The lack of clear documentation for the data model is critical because it can hinder the in-house team's ability to support and maintain the application effectively. While the location of the vendor and cost considerations are relevant, they do not directly impact the immediate ability to manage the application. Additionally, the absence of a training plan, while concerning, is not as fundamental as having a clear understanding of the data model itself.