When reviewing an ongoing business process reengineering project, which of the following should be an IS auditor's GREATEST concern?

The correct answer is B. Control gaps are created but not addressed.. The greatest concern during a business process reengineering project is the creation of new control gaps without mitigation. Reengineering often changes workflows and responsibilities, and if controls are not redesigned accordingly, it can expose the organization to significant o

Submitted by fatema_kw· Apr 18, 2026Information Systems Acquisition, Development and Implementation

Question

Options

AAdditional cost may be required to stabilize the process.
BControl gaps are created but not addressed.
CA business impact analysis (BIA) may not be carried out.
DExisting processes may not be fully documented.

How the community answered

(33 responses)

A
6% (2)
B
58% (19)
C
12% (4)
D
24% (8)

Explanation

The greatest concern during a business process reengineering project is the creation of new control gaps without mitigation. Reengineering often changes workflows and responsibilities, and if controls are not redesigned accordingly, it can expose the organization to significant operational and security risks.

Topics

#Business Process Reengineering#Control Gaps#IS Audit Concerns#Risk Management

Community Discussion

No community discussion yet for this question.

Full CISA Practice