If an IS auditor observes that an IS department fails to use formal documented methodologies,
policies, and standards, what should the auditor do? Choose the BEST answer.

Which of the following is a program evaluation review technique that considers different scenarios
for planning and control projects?

What is a reliable technique for estimating the scope and cost of a software-development project?

When participating in a systems-development project, an IS auditor should focus on system
controls rather than ensuring that adequate and complete documentation exists for all projects.
True or false?

If an IS auditor observes that individual modules of a system perform correctly in development
project tests, the auditor should inform management of the positive results and recommend further:

Who assumes ownership of a systems-development project and the resulting system?

Function Point Analysis (FPA) provides an estimate of the size of an information system based only
on the number and complexity of a system’s inputs and outputs. True or false?

The quality of the metadata produced from a data warehouse is _______________ in the
warehouse’s design. Choose the BEST answer.

Whenever an application is modified, what should be tested to determine the full impact of the
change? Choose the BEST answer.

What is a primary high-level goal for an auditor who is reviewing a system development project?