Exam CISA topic 1 question 74 discussion

A. The system does not have a maintenance plan. During a post-implementation review, an IS auditor should be most concerned with the absence of a maintenance plan for the system. A well-designed maintenance plan is crucial to ensuring that the system continues to function effectively and meet the organization's needs over time. The maintenance plan should include regular updates, monitoring, and testing to identify and resolve any issues that arise. Without a maintenance plan, the system may become vulnerable to security threats or may not perform as intended, which could lead to disruptions in business operations or negative impacts on the organization's reputation.

Answer: A

should have a maintenance plan

A system without a maintenance plan is at great risk because it may not be able to adapt to changing needs, correct errors, or prevent security breaches. A maintenance plan is essential to ensure long-term system reliability, availability, and performance.

A - correct answer

Maintenance plan can be devised after the post-implementation review. Existence of several minor defects hints bigger potential issues in system design, coding practice, all the functional tests and QA process. All these issues require significant amount of resources to identify and correct, whereas missing a maintenance plan needs only to come up with one.

Existence of several minor defects could be a trigger to a problem in the coding or the system design.

Ans, Should be A

i think the answer should be A. In postimplementation review, the maintenance state of the target should be the primary concern for Auditor.

SHOULD BE A

A is most important.

Should be A. Minor defects is less critical.

absence of maintenance plan may render the existing functionality unmaintained/ unmanaged. this is a bigger concern than minor defects. hence A can be better choice.

B. minor defects are an immediate threat to the system

B is correct because have to verify the system has been properly designed and developed and that proper controls have been built into the system

I think answer should be A