nerdexam
Isaca

CISA · Question #391

Which of the following is MOST important to include when developing an organization's test strategy?

The correct answer is A. Risks and contingencies. A test strategy is a high-level document that defines the overall approach, scope, and direction for testing. Risks and contingencies must be included because they drive which areas to prioritize, how to allocate testing resources, and what fallback plans exist if testing…

Submitted by fernanda_arg· Apr 18, 2026Information Systems Acquisition, Development, and Implementation

Question

Which of the following is MOST important to include when developing an organization’s test strategy?

Options

  • ARisks and contingencies
  • BTest scenario benchmarks
  • CProgramming walk-throughs
  • DResults of regression test

How the community answered

(25 responses)
  • A
    76% (19)
  • B
    8% (2)
  • C
    12% (3)
  • D
    4% (1)

Explanation

A test strategy is a high-level document that defines the overall approach, scope, and direction for testing. Risks and contingencies must be included because they drive which areas to prioritize, how to allocate testing resources, and what fallback plans exist if testing uncovers critical issues. Test scenario benchmarks (B) and regression results (D) are outputs of test execution, not strategy inputs. Programming walk-throughs (C) are a code-review technique, not a testing strategy element. Without a risk-based foundation, a test strategy lacks the context to be actionable or effective.

Topics

#Test Strategy#Risk Management#Contingency Planning#SDLC Testing

Community Discussion

No community discussion yet for this question.

Full CISA Practice