Certified Information Systems Auditor (CISA) — Question 91

Which of the following should be an IS auditor’s GREATEST concern when reviewing an organization’s capacity management planning?

Answer options

• A. Many of the resource requirements are based on estimates
• B. The organization is increasingly dependent on the use of cloud providers
• C. Some planning areas are not well developed
• D. Current resource utilization is not monitored

Correct answer: D

Explanation

The correct answer is D because without monitoring current resource utilization, the organization may face performance issues and inefficiencies. While A, B, and C are valid concerns, they are secondary to the critical need for proper monitoring of resource utilization to ensure capacity aligns with demand.