nerdexam
(ISC)2

CCSP · Question #145

Which of the following would NOT be included as input into the requirements gathering for an application or system?

The correct answer is D. Auditors. While users, management, and regulators directly define the functional and non-functional needs of an application or system, auditors typically review compliance and effectiveness post-implementation rather than dictating initial requirements.

Submitted by kavita_s· Apr 18, 2026Cloud Application Security

Question

Which of the following would NOT be included as input into the requirements gathering for an application or system?

Options

  • AUsers
  • BManagement
  • CRegulators
  • DAuditors

How the community answered

(45 responses)
  • A
    2% (1)
  • B
    7% (3)
  • C
    2% (1)
  • D
    89% (40)

Why each option

While users, management, and regulators directly define the functional and non-functional needs of an application or system, auditors typically review compliance and effectiveness post-implementation rather than dictating initial requirements.

AUsers

Users are crucial for defining functional requirements and usability aspects of an application or system, as they are the primary stakeholders who will interact with it.

BManagement

Management provides strategic direction, budget constraints, business goals, and often non-functional requirements such as performance or scalability, making them essential input providers.

CRegulators

Regulators impose legal and industry-specific compliance requirements that directly impact the design and functionality of systems, especially in regulated industries.

DAuditorsCorrect

Auditors review systems for compliance, security, and effectiveness after they are built or during their operation, but they typically do not provide direct input into the initial requirements gathering phase for an application or system's functionality or design. Their role is evaluation, not specification.

Concept tested: Application/system requirements gathering stakeholders

Topics

#Requirements Gathering#SDLC#Stakeholder Analysis#Application Development

Community Discussion

No community discussion yet for this question.

Full CCSP Practice