Isaca CISA Exam - Topic 6 Question 38 Discussion

Actual exam question for Isaca's CISA exam

Question #: 38
Topic #: 6

During a project meeting for the implementation of an enterprise resource planning (ERP), a new requirement is requested by the finance department. Which of the following would BEST indicate to an IS auditor that the resulting risk to the project has been assessed?

AThe project status as reported in the meeting minutes

BThe approval of the change by the finance department

CThe analysis of the cost and time impact of the requirement

DThe updated business requirements

Show Suggested Answer

Suggested Answer: C

by Erick at May 04, 2022, 03:46 PM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Junita

7 months ago

D doesn't show risk assessment clearly.

upvoted 0 times

...

Alishia

7 months ago

A is just meeting minutes, not enough info.

upvoted 0 times

...

Alaine

7 months ago

Surprised that people overlook the analysis part!

upvoted 0 times

...

Marlon

7 months ago

I think B is important too, but not the best indicator.

upvoted 0 times

...

Linn

8 months ago

C is definitely the best choice. Cost and time impact matters!

upvoted 0 times

...

Delmy

8 months ago

I lean towards the cost and time impact analysis as the best indicator, since it directly relates to project risk management.

upvoted 0 times

...

Ryann

8 months ago

The approval from the finance department seems important, but it doesn't necessarily mean they've assessed the risk properly, right?

upvoted 0 times

...

Corrinne

8 months ago

I think the analysis of the cost and time impact is crucial, but I'm not entirely sure if that's the best indicator of risk assessment.

upvoted 0 times

...

Sol

8 months ago

I remember a practice question where the focus was on project status updates, but I feel like that might not fully capture the risk aspect.

upvoted 0 times

...

Man

8 months ago

I've got a good feeling about this one. The object copying implementation seems straightforward, and I think I know the expected output.

upvoted 0 times

...

Lauran

8 months ago

I remember something about the BBA making some changes to benefits, but I can't recall if it expanded preventative services or not.

upvoted 0 times

...

Oretha

8 months ago

Power Automate might be useful to automate the process of getting the data from the on-premises source, but I'm not sure if that's the best tool to use directly in the canvas app.

upvoted 0 times

...

Murray

8 months ago

This one seems pretty straightforward. I'm pretty confident the answer is C - confidential data stored in a fire safe is not an information security vulnerability.

upvoted 0 times

...