An IS auditor is asked to provide feedback on the systems options analysis for a new project. The BEST course of action for the IS auditor would be to:

The correct answer is C. Comment on the criteria used to assess the alternatives. The IS auditor should remain independent and objective. The best way to provide value without interfering in management decisions is to review and comment on the criteria used for evaluating alternatives, ensuring they are complete, relevant, and aligned with business needs…

Submitted by joshua94· Apr 18, 2026Information Systems Acquisition, Development, and Implementation

Question

Options

AIdentify the best alternative.
BRetain comments as findings for the audit report.
CComment on the criteria used to assess the alternatives.
DRequest at least one other alternative.

How the community answered

(19 responses)

A
11% (2)
B
5% (1)
C
79% (15)
D
5% (1)

Explanation

The IS auditor should remain independent and objective. The best way to provide value without interfering in management decisions is to review and comment on the criteria used for evaluating alternatives, ensuring they are complete, relevant, and aligned with business needs. Option A: Identifying the "best" option compromises independence. Option B: Deferring to the audit report misses the chance to add timely value. Option D: Requesting another alternative intrudes on management's role. Option C: Correct - ensures appropriate evaluation criteria without biasing decisions.

Topics

#IS Auditor Role#Systems Options Analysis#Project Review#Audit Feedback

Community Discussion

No community discussion yet for this question.

Full CISA Practice