Certified Information Systems Auditor (CISA) — Question 803

The following findings are the result of an IS auditor’s post-implementation review of a newly implemented system. Which of the following findings is of GREATEST significance?

Answer options

• A. The project’s 10% budget overrun was not reported to senior management.
• B. A lessons-learned session was never conducted.
• C. Measurable benefits were not defined.
• D. Monthly dashboards did not always contain deliverables.

Correct answer: C

Explanation

Identifying measurable benefits is crucial for evaluating the success of any project. Without these defined benefits, it is challenging to assess the project's effectiveness and justify the investment. The other findings, while important, do not directly impact the ability to measure the project's success.