MENU
Prior to the of acquired software into production, it is MOST important that the IS auditor review the:
Suggested Answer: A
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
BE
Bernardo
11 months ago
Nah, I’d go with the vendor testing report too.
VE
Verdell
12 months ago
System documentation is key for understanding the software.
CE
Cecily
12 months ago
Surprised that source code escrow is even an option here.
SH
Shannon
12 months ago
I think user acceptance test report is more crucial.
WE
Wendell
1 year ago
Definitely the vendor testing report!
SH
Shenika
1 year ago
I vaguely recall something about source code escrow agreements being more of a safety net than a priority for initial reviews. Not sure if that applies here.
MA
Margot
1 year ago
User acceptance tests seem really important too, as they reflect actual user feedback, but I wonder if they come after the vendor testing report.
SA
Sabra
1 year ago
I remember a similar question where we had to prioritize documentation. I feel like system documentation might be the key here, but I could be wrong.
GL
Glory
1 year ago
I think reviewing the vendor testing report is crucial since it shows how the software performed in real scenarios, but I'm not entirely sure if it's the most important.
SH
Shasta
1 year ago
This question seems pretty straightforward. I'd recommend hardening the DNS servers and restricting zone transfers to ensure the company's DNS security.
JA
Jamal
1 year ago
This looks like a tricky question, but I think I can handle it. The key is to understand the different looping options and choose the one that best fits the requirements.