Which of the following should be an IS auditor's MOST important consideration when auditing an organization's system capacity management processes?

The correct answer is B. Assessing response times during regular operations and periods of high demand. System capacity management is primarily concerned with ensuring systems can meet performance requirements under both normal and peak conditions. Assessing response times during regular operations and periods of high demand directly confirms whether capacity planning and…

Submitted by olafpl· Apr 18, 2026Information Systems Operations and Business Resilience

Question

Which of the following should be an IS auditor’s MOST important consideration when auditing an organization’s system capacity management processes?

Options

AVerifying the frequency and effectiveness of data backup procedures
BAssessing response times during regular operations and periods of high demand
CReviewing the organization's cybersecurity capabilities
DEvaluating the most recent business impact analysis (BIA)

How the community answered

(57 responses)

A
7% (4)
B
72% (41)
C
5% (3)
D
16% (9)

Explanation

System capacity management is primarily concerned with ensuring systems can meet performance requirements under both normal and peak conditions. Assessing response times during regular operations and periods of high demand directly confirms whether capacity planning and monitoring are effective in supporting business needs.

Topics

#System Capacity Management#Performance Monitoring#IT Operations#IS Auditing

Community Discussion

No community discussion yet for this question.

Full CISA Practice