Exam CISA Topic 1 Question 61 Discussion
Actual exam question for ISACA's CISA exam
Question #: 61
Topic #: 1
Question #: 61
Topic #: 1
During a postimplementation review of an enterprise resource management system, an IS auditor would
MOST likely:
MOST likely:
Suggested Answer: A Vote an answer
Section: Protection of Information Assets
Explanation:
Reviewing access control configuration would be the first task performed to determine whether security has
been appropriately mapped in the system. Since a postimplementation review is done after user
acceptance testing and actual implementation, one would not engage in interface testing or detailed design
documentation. Evaluating interface testing would be part of the implementation process. The issue of
reviewing detailed design documentation is not generally relevant to an enterprise resource management
system, since these are usually vendor packages with user manuals. System testing should be performed
before final user signoff.
Explanation:
Reviewing access control configuration would be the first task performed to determine whether security has
been appropriately mapped in the system. Since a postimplementation review is done after user
acceptance testing and actual implementation, one would not engage in interface testing or detailed design
documentation. Evaluating interface testing would be part of the implementation process. The issue of
reviewing detailed design documentation is not generally relevant to an enterprise resource management
system, since these are usually vendor packages with user manuals. System testing should be performed
before final user signoff.
by Kirk at Feb 14, 2025, 09:54 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).