Certified Information Systems Auditor (CISA) — Question 841

When auditing an organization’s software acquisition process, the BEST way for an IS auditor to understand the software benefits to the organization would be to review the:

Answer options

• A. alignment with IT strategy
• B. business case
• C. feasibility study
• D. request for proposal (RFP)

Correct answer: B

Explanation

The best approach for an IS auditor to grasp the software's benefits is by reviewing the business case, as it outlines the justification for the software investment. The other options, while relevant, do not provide as comprehensive an understanding of the specific advantages the software brings to the organization.