Exam CISA topic 1 question 828 discussion

While option D (Business and IT stakeholders participated in the post-implementation review) is important, actually documenting learnings and incorporating them into implementation provides more concrete evidence of an effective review.

B. Lessons learned were documented and applied. This option indicates that not only were lessons learned during the post-implementation review process, but they were also documented and put into practice. This demonstrates that the review was not just a procedural formality but had a meaningful impact on improving processes and systems. It implies that the organization is committed to continuous improvement and learning from past experiences, which is a key aspect of effective post-implementation reviews.