Certified in Risk and Information Systems Control (CRISC) — Question 1275

The software version of an enterprise's critical business application has reached end-of-life and is no longer supported by the vendor. IT has decided to develop an in-house replacement application. Which of the following should be the PRIMARY concern?

Answer options

• A. The business process owner is not an active participant.
• B. The board of directors has not approved the decision.
• C. The system documentation is not available.
• D. Enterprise risk management (ERM) has not approved the decision.

Correct answer: A

Explanation

The primary concern should be the involvement of the business process owner, as their input is crucial for ensuring that the new application meets business needs. Without their active participation, the development may not align with operational requirements. While the other factors are important, they do not directly impact the application's relevance to business processes as significantly as the owner's involvement.