Certified Information Systems Auditor (CISA) — Question 894

An IS auditor notes that IT and the business have different opinions on the availability of their application servers. Which of the following should the IS auditor review FIRST in order to understand the problem?

Answer options

• A. The exact definition of the service levels and their measurement
• B. The regular performance-reporting documentation
• C. The alerting and measurement process on the application servers
• D. The actual availability of the servers as part of a substantive test

Correct answer: A

Explanation

The correct answer is A because understanding the exact definition of service levels and their measurement is crucial to resolving differing opinions on availability. Options B, C, and D may provide insights but do not address the fundamental definitions and measurements that are causing the disagreement.