Exam CISA topic 1 question 1775 discussion

Actual exam question from Isaca's CISA

Question #: 1775
Topic #: 1

[All CISA Questions]

Which of the following is the PRIMARY reason to involve IS auditors in the software acquisition process?

A. To help ensure hardware and operating system requirements are considered
B. To help ensure proposed contracts and service level agreements (SLAs) address key elements
C. To help ensure the project management process complies with policies and procedures
D. To help ensure adequate controls to address common threats and risks are considered

Show Suggested Answer

Suggested Answer: D 🗳️

by 46080f2 at March 7, 2025, 3:58 p.m.

Comments

Submit Cancel

CCNPWILL

3 days, 5 hours ago

Selected Answer: D

Agreed. D. an answer involving risk is typically going to be the best answer. After all, we are answering from the risk-based auditor approach.

upvoted 1 times

...

The question asks for the primary reason to involve IS auditors, emphasizing their most fundamental contribution. While options A, B, and C represent valid aspects of the acquisition process, they are either technical (A), contractual (B), or managerial (C) in nature, areas where auditors play a supporting rather than leading role. Option D, however, reflects the essence of IS auditing: ensuring that adequate controls are in place to address risks, which is critical when acquiring software that could impact the organization’s security and compliance posture.

upvoted 2 times

...

Exam CISA All Questions

View all questions & answers for the CISA exam

Exam CISA topic 1 question 1775 discussion

Comments

CCNPWILL

46080f2

SY0-701