ISACA Certified Information Systems Auditor (CISA) ExamDomain 4: Information Systems Operations and Business ResilienceMedium
An IS auditor is evaluating an organization's information systems maintenance program. The auditor finds that the organization primarily performs corrective maintenance, addressing issues only after they cause system failures or performance degradation. There is no structured approach to preventive maintenance. What is the MOST likely long-term impact on the organization's operational efficiency and cost management?
- AIncreased system uptime and predictability.
- BHigher overall maintenance costs and frequent unplanned downtime.
- CReduced need for specialized maintenance staff.
- DImproved software license compliance.
Show answer & explanationAnswer & explanation
Correct answer: B. Higher overall maintenance costs and frequent unplanned downtime.
A purely corrective maintenance strategy leads to a reactive environment where systems frequently fail. This results in more frequent and often more expensive emergency repairs, increased unplanned downtime, and higher overall operational costs compared to a proactive preventive approach.
Why the other options are wrong
- A. A reactive approach leads to unpredictable failures and decreased uptime, not increased predictability.
- C. Corrective maintenance often requires specialized staff for urgent, complex repairs, not less.
- D. Maintenance strategy doesn't directly impact software license compliance; that's a separate management process.
Preventive Maintenance
Scheduled and routine maintenance performed to prevent failures, extend the lifespan of equipment, and reduce unplanned downtime.
- Proactive, not reactive.
- Aims to identify and fix issues before they become problems.
- Reduces long-term costs and improves system reliability.
Memory trick: Fixing only when broken breaks the budget and the clock.