A legacy payroll application is migrated to a new application. Which of the following stakeholders
should be PRIMARILY responsible for reviewing and signing-off on the accuracy and completeness
of the data before going live?

An organization is implementing an enterprise resource planning (ERP) application to meet its
business objectives. Of the following, who is PRIMARILY responsible for overseeing the project in
order to ensure that it is progressing in accordance with the project plan and that it will deliver the
expected results?

When reviewing an active project, an IS auditor observed that, because of a reduction in anticipated
benefits and increased costs, the business case was no longer valid. The IS auditor should
recommend that the:

Which of the following should an IS auditor review to understand project progress in terms of time,
budget and deliverables for early detection of possible overruns and for projecting estimates at
completion (EACs)?

An IS auditor is assigned to audit a software development project which is more than 80 percent
complete, but has already overrun time by 10 percent and costs by 25 percent. Which of the
following actions should the IS auditor take?

When reviewing a project where quality is a major concern, an IS auditor should use the project
management triangle to explain that:

While evaluating software development practices in an organization, an IS auditor notes that the
quality assurance (QA) function reports to project management. The MOST important concern for
an IS auditor is the:

An IS auditor invited to a development project meeting notes that no project risks have been
documented. When the IS auditor raises this issue, the project manager responds that it is too early
to identify risks and that, if risks do start impactingthe project, a risk manager will be hired. The
appropriate response of the IS auditor would be to:

An IS auditor has been asked to participate in project initiation meetings for a critical project. The
IS auditor’s MAIN concern should be that the:

At the completion of a system development project, a postproject review should include which of
the following?