Discuss Isaca CISA Exam Topic 3 Question 72

Which of the following provides the MOST useful information to an IS auditor when selecting projects for inclusion in an IT audit plan?

AProject charter

BProject plan

CProject issue log

DProject business case

Suggested Answer: D

The project business case provides the IS auditor with information on the purpose and objectives of the project, the expected costs and benefits of the project, and the possible risks associated with the project. This information can be used to help the IS auditor determine if the project is worth including in the IT audit plan. For more information, please refer to the ISACA CISA Study Guide section 4.12.2.1.

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

20 comments · newest first

Harris 10 months ago

I thought the business case was just a formality, interesting!

Dulce 11 months ago

I agree, the project charter sets the foundation for everything!

Yvonne 11 months ago

Wait, are we sure the issue log isn't more important?

Felicia 11 months ago

Definitely, the project plan gives a clear timeline and scope too.

Domitila 11 months ago

I think the project business case is key for understanding value.

Laticia 12 months ago

I feel like the project charter might give a good overview, but I wonder if it has enough detail compared to the business case.

Arlen 12 months ago

I’m a bit confused about the project issue log; it seems relevant for ongoing audits but not for initial selection.

Solange 12 months ago

I remember practicing a similar question, and I think the project plan could be important too, as it details the execution strategy.

Maile 1 year ago

I think the project business case might be the most useful since it outlines the project's justification and expected benefits, but I'm not entirely sure.

Dean 1 year ago

I'm leaning towards the project charter. That document typically includes the high-level scope, goals, and stakeholders, which would give the auditor a good overview to work with.

Annamae 1 year ago

The project business case seems like the most relevant document here. It should outline the rationale and objectives for the project, which would be crucial for an auditor to evaluate.

Carma 1 year ago

Hmm, I'm a bit unsure about this one. I'll need to think through the different project documents and which one would provide the most useful information for an auditor.

Robt 1 year ago

This seems like a straightforward question about IT auditing. I'll focus on understanding the key information an auditor would need to select projects.

Royal 1 year ago

Changing the data type of a field used in an Apex class or for lead conversion seems like it could cause issues. I'll need to double-check the details on those options.

Leah 1 year ago

I've worked with Huawei servers before, so I'm pretty confident I can figure this out. Let me go through the choices one by one.

Corazon 1 year ago

Hmm, I'm a bit unsure about this one. I'm not very familiar with SAP environments, so I'm not sure if the license information, data volume management report, or network inventory would be more appropriate. I'll have to think this through carefully.

Lachelle 2 years ago

I agree with Charlette, the project plan provides a detailed outline of the project.

Stacey 2 years ago

I think the project issue log is also crucial for the IS auditor.

Arthur 2 years ago

I disagree, I believe the project business case is more important.

Charlette 2 years ago

I think the project plan is the most useful information.

Isaca CISA Exam - Topic 3 Question 72 Discussion