Which of the following should be of GREATEST concern to an IS auditor reviewing an organization's IT process performance reports over the last quarter?
A.
Metrics are not aligned with industry benchmarks.
B.
Metrics were defined without stakeholder review.
C.
Key performance indicators (KPIs) were met in only one month.
D.
Performance reporting includes too many technical terms.
The auditor’s primary duty is to identify material risks and control deficiencies. Consistent KPI failures (C) signal real operational problems, making this the top priority.
When metrics are defined to evaluate the performance of IT processes, without involving stakeholders, there is a question of whether the metrics are aligned with the organization's overall business goals and strategy. Without stakeholder review, there is no assurance that the metrics are set appropriately, which can result in inaccurate assessments and decisions.
Consistency in meeting key performance indicators over time is crucial for assessing the sustained performance of IT processes. If KPIs were met in only one month out of the last quarter, it raises concerns about the overall effectiveness and reliability of the IT processes. Inconsistent performance may indicate variability or issues that need to be addressed.
its C. Metrics can be defined without stakeholder review and still be meaningful and effective.
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.CISA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
9967be3
1 week, 1 day agoSwallows
9 months, 2 weeks agoYejide03
1 year, 2 months agoFAGFUR
1 year, 5 months agostarzuu
1 year, 9 months ago