Certified Information Systems Auditor (CISA) — Question 880

During recent post-implementation reviews, an IS auditor has noted that several deployed applications are not being used by the business. The MOST likely cause would be the lack of:

Answer options

• A. change management.
• B. IT portfolio management.
• C. IT resource management.
• D. system support documentation.

Correct answer: B

Explanation

The correct answer is B, as effective IT portfolio management ensures that the applications align with business needs and are actively utilized. Without it, there may be a disconnect between the deployed applications and the actual requirements of the business, leading to underutilization. The other options, while important, do not directly address the alignment and strategic oversight necessary for application usage.