ISACA Certified Information Systems Auditor (CISA) ExamDomain 3: Information Systems Acquisition, Development and ImplementationHard
An IS auditor is reviewing the project management practices for a new data analytics platform. The project manager reports that the project is on schedule and within budget, but key stakeholders express concerns about the solution's ability to meet their evolving business intelligence needs. Which of the following is the MOST likely underlying issue?
- APoor change control procedures.
- BLack of continuous requirements validation.
- CInsufficient benefits realization management.
- DInadequate risk management planning.
Show answer & explanationAnswer & explanation
Correct answer: B. Lack of continuous requirements validation.
The scenario indicates that while the project is technically on track (on schedule, within budget), the delivered solution might not meet 'evolving business intelligence needs.' This points to a failure in continuously validating that the system being built still aligns with current and future business requirements, especially in dynamic environments like data analytics.
Why the other options are wrong
- A. Poor change control would likely manifest as scope creep or budget/schedule overruns, which are not indicated here.
- C. Benefits realization management focuses on tracking actual benefits post-implementation; the issue here is with the solution's design/development pre-implementation.
- D. While risk management is broad, the specific problem points to requirements, not general project risks.
Continuous Requirements Validation
An ongoing process throughout the system development lifecycle to ensure that the evolving system design and implementation consistently align with current and anticipated business needs and stakeholder expectations.
- Crucial for dynamic projects.
- Prevents scope creep and rework.
- Ensures solution relevance to business goals.
Memory trick: Project's on track, but the map's outdated!