Certified Information Systems Auditor (CISA) — Question 688

Which of the following should be of GREATEST concern to an IS auditor reviewing an organization's IT process performance reports over the last quarter?

Answer options

• A. Metrics are not aligned with industry benchmarks.
• B. Metrics were defined without stakeholder review.
• C. Key performance indicators (KPIs) were met in only one month.
• D. Performance reporting includes too many technical terms.

Correct answer: C

Explanation

The greatest concern is that key performance indicators (KPIs) were met in only one month, indicating potential issues with overall performance consistency. While misalignment with benchmarks and lack of stakeholder input are valid issues, they do not directly reflect the organization's ability to meet its goals as clearly as KPI performance. Excessive technical terminology in reports may hinder understanding, but it is not as critical as failing to consistently meet KPIs.