A post-implementation review was conducted by issuing a survey to users. Which of the following should be of GREATEST concern to an IS auditor?

The correct answer is C. The survey questions did not address the scope of the business case. If survey questions do not address the scope of the business case, the post-implementation review is fundamentally invalid-it cannot assess whether the project delivered its intended business value. This renders the entire review effort meaningless for decision-making purposes…

Submitted by suresh_in· Apr 18, 2026Information Systems Acquisition, Development and Implementation

Question

Options

AThe survey form template did not allow additional feedback to be provided.
BThe survey results were not presented in detail to management.
CThe survey questions did not address the scope of the business case.
DThe survey was issued to employees a month after implementation.

How the community answered

(26 responses)

A
15% (4)
B
8% (2)
C
46% (12)
D
31% (8)

Explanation

If survey questions do not address the scope of the business case, the post-implementation review is fundamentally invalid-it cannot assess whether the project delivered its intended business value. This renders the entire review effort meaningless for decision-making purposes. A template without free-text fields (A) is a minor limitation, not a critical flaw. Presenting only summary results to management (B) is a reporting style issue, not a substantive deficiency. Issuing the survey a month after implementation (D) is actually reasonable, as users need time to experience the system; this is not a significant concern.

Topics

#Post-implementation review#Business case alignment#Audit relevance#System evaluation

Community Discussion

No community discussion yet for this question.

Full CISA Practice