Certified Information Systems Auditor (CISA) — Question 521

What is BEST for an IS auditor to review when assessing the effectiveness of changes recently made to processes and tools related to an organization's business continuity plan (BCP)?

Answer options

• A. Change management processes
• B. Updated inventory of systems
• C. Full test results
• D. Completed test plans

Correct answer: C

Explanation

The correct answer is C, as full test results provide direct evidence of the effectiveness of the changes made to the BCP. Options A and B, while important, do not directly reflect the success of the changes, and option D offers plans rather than outcomes, making it less relevant for assessing effectiveness.