ISACA Certified Information Systems Auditor (CISA) ExamDomain 3: Information Systems Acquisition, Development and ImplementationHard
An IS auditor is reviewing the readiness of a new enterprise resource planning (ERP) system for implementation. The system is intended to replace several legacy applications across finance, human resources, and supply chain departments. Which of the following is the MOST critical readiness factor to assess before 'go-live'?
- AFinalization of the vendor contract and support agreements.
- BSuccessful completion of end-to-end user acceptance testing (UAT).
- CCompletion of all user training modules.
- DAvailability of a comprehensive disaster recovery plan (DRP) for the new system.
Show answer & explanationAnswer & explanation
Correct answer: B. Successful completion of end-to-end user acceptance testing (UAT).
While all options are important, successful end-to-end User Acceptance Testing (UAT) is the MOST critical as it directly validates that the system meets business requirements, functions as expected in a real-world scenario, and is acceptable to the end-users who will operate it. Without successful UAT, the system may fail to deliver business value.
Why the other options are wrong
- A. Contract finalization is a prerequisite for acquisition but does not directly confirm the system's operational readiness or fitness for purpose.
- C. User training is essential for adoption, but the system must first be proven to work correctly and meet business needs, which UAT confirms.
- D. A DRP is crucial for business continuity, but it addresses recovery from failure, not the initial functional readiness or acceptance of the system itself.
Go-Live Readiness - UAT
User Acceptance Testing (UAT) is the final phase of testing where end-users verify if the system meets their requirements and is acceptable for deployment.
- Validates business requirements are met.
- Ensures system is fit for purpose from user perspective.
- Critical gate before production deployment.
Memory trick: Before you fly, users must verify, or your project will die.