Exam CISA topic 1 question 1101 discussion

The most important thing in a CISA audit is “How well are you mitigating risks?” Therefore, UAT is key to showing that the system is working well and that it is acceptable to the business.

Another controversial and non-professional question, as my many-year Software QA experience: 1. if the upgrade contains a large scale of contents -> UAT + System test 2. if the upgrade contains a small scale of contents -> UAT + Regression test Which means there is no answer here, because only UAT or only Regression are both wrong......

The primary focus of reviewing the first year of a project is regression testing. Regression testing is a type of testing that verifies that the existing functionality of a system is unaffected by changes or upgrades made to the system.

While network performance testing, unit testing, and regression testing are also essential components of the SDLC, they are not the primary focus of the IS auditor reviewing the first year of the project. Network performance testing is typically performed during the system testing phase, which occurs after UAT. Unit testing is performed by developers during the coding phase, and regression testing is performed during the testing phase to ensure that changes to the system do not adversely affect existing functionality.

The primary focus of the IS auditor reviewing the first year of the project, where the system version upgrade will be applied, should be on unit testing. Unit testing is a phase of the testing process where individual components or modules of the software are tested in isolation to ensure their correctness and functionality. This is particularly relevant when upgrading the system version to verify that the individual units or components of the ERP system are functioning as expected with the new version.