Discuss Isaca CISA Exam Topic 4 Question 62

An IS auditor should look for which of the following to ensure the risk associated with scope creep has been mitigated during software development?

ASource code version control

BProject change management controls

CExistence of an architecture review board

DConfiguration management

Suggested Answer: B

Based on the information provided, the IS auditor should look for B: Project change management controls to ensure the risk associated with scope creep has been mitigated during software development. Project change management controls ensure that any changes made to the project are properly documented, communicated, and approved by the appropriate personnel. This helps to ensure that changes to the project are tracked and managed and that the project remains within its originally defined scope. Additionally, project change management controls help to ensure that any changes made are in line with the organization's goals and objectives.

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Portia 11 months ago

Surprised this isn't more about communication issues!

Johnetta 11 months ago

Wait, are we really considering D? Seems a bit much.

Tomoko 11 months ago

I think C is a bit overrated, not always necessary.

Dion 11 months ago

A is super important too, can't lose track of versions.

Erick 12 months ago

Definitely B, change management is key!

Sheridan 12 months ago

Configuration management seems relevant too, but I feel like it’s more about maintaining system integrity than directly addressing scope creep.

Alease 12 months ago

I think an architecture review board could help with scope creep by ensuring all changes align with the overall project goals, but I'm not confident.

Virgina 1 year ago

I'm not entirely sure, but I feel like source code version control is more about tracking changes rather than directly preventing scope creep.

Marva 1 year ago

I remember discussing how project change management controls are crucial for managing scope creep. I think that might be the right answer.

Polly 1 year ago

Okay, I've got a strategy here. I'll start by eliminating the options I'm sure are wrong, then focus on the ones that seem more plausible.

Harris 1 year ago

This question is testing our understanding of flexfield configuration and integration with the Oracle Assets module. I'll need to think through each option carefully to determine the two that are correct.

Ming 1 year ago

I'm a bit confused about the different nice values and how they affect process priority. I'll need to double-check the man page.

Hyman 1 year ago

Okay, let's see. umask sets the default file permissions, usermod modifies a user account, passwd changes a user's password, and chage changes a user's password expiration date. I think the answer has to be C, ulimit, since that's the only one that seems related to resource limits.

An 1 year ago

I'm pretty sure physical destruction or deletion and transfer to an off-site storage facility are examples of records disposition, but I'm not sure about the other options.

Isaca CISA Exam - Topic 4 Question 62 Discussion