A project manager of a project that is scheduled to take 18 months to complete announces that the project is in
a healthy financial position because, after 6 months, only one-sixth of the budget has been spent. The IS
auditor should FIRST determine:

A legacy payroll application is migrated to a new application. Which of the following stakeholders should be
PRIMARILY responsible for reviewing and signing-off on the accuracy and completeness of the data before
going live?

An organization is implementing an enterprise resource planning (ERP) application to meet its business
objectives. Of the following, who is PRIMARILY responsible for overseeing the project in order to ensure that it
is progressing in accordance with the project plan and that it will deliver the expected results?

When reviewing an active project, an IS auditor observed that, because of a reduction in anticipated benefits
and increased costs, the business case was no longer valid. The IS auditor should recommend that the:

Which of the following should an IS auditor review to understand project progress in terms of time, budget and
deliverables for early detection of possible overruns and for projecting estimates at completion (EACs)?

An IS auditor is assigned to audit a software development project which is more than 80 percent complete, but
has already overrun time by 10 percent and costs by 25 percent. Which of the following actions should the IS
auditor take?

When reviewing a project where quality is a major concern, an IS auditor should use the project management
triangle to explain that:

While evaluating software development practices in an organization, an IS auditor notes that the quality
assurance (QA) function reports to project management. The MOST important concern for an IS auditor is the:

An IS auditor invited to a development project meeting notes that no project risks have been documented.
When the IS auditor raises this issue, the project manager responds that it is too early to identify risks and that,
if risks do start impactingthe project, a risk manager will be hired. The appropriate response of the IS auditor
would be to:

An IS auditor has been asked to participate in project initiation meetings for a critical project. The IS auditor’s
MAIN concern should be that the: