Certified in Risk and Information Systems Control (CRISC) — Question 471

An organization has made a decision to purchase a new IT system. During which phase of the system development life cycle (SDLC) will identified risk MOST likely lead to architecture and design trade-offs?

Answer options

• A. Acquisition
• B. Implementation
• C. Initiation
• D. Operation and maintenance

Correct answer: A

Explanation

The correct answer is A, Acquisition, because this is the phase where the requirements are gathered and risks are assessed, leading to decisions on architecture and design. In contrast, Implementation focuses on building the system, Initiation is about project start-up, and Operation and maintenance deal with ongoing support, where architectural decisions are generally already established.