nerdexam
Isaca

CRISC · Question #373

Which of the following is the GREATEST concern if user acceptance testing (UAT) is not conducted when implementing a new application?

The correct answer is D. The application could fail to meet defined business requirements. The primary concern of skipping User Acceptance Testing (UAT) is that the new application may not fulfill the actual operational needs and business requirements of its users.

Submitted by manish99· Apr 18, 2026IT Risk Assessment

Question

Which of the following is the GREATEST concern if user acceptance testing (UAT) is not conducted when implementing a new application?

Options

  • AThe probability of application defects will increase
  • BData confidentiality could be compromised
  • CIncrease in the use of redundant processes
  • DThe application could fail to meet defined business requirements

How the community answered

(46 responses)
  • A
    2% (1)
  • B
    7% (3)
  • C
    4% (2)
  • D
    87% (40)

Why each option

The primary concern of skipping User Acceptance Testing (UAT) is that the new application may not fulfill the actual operational needs and business requirements of its users.

AThe probability of application defects will increase

While skipping UAT might allow some defects to slip through, UAT is primarily about validating business requirements and user workflows, not solely detecting technical defects which are typically addressed in earlier testing phases.

BData confidentiality could be compromised

Data confidentiality issues are generally addressed through security testing and design principles, not primarily by UAT, which focuses on functional and usability requirements.

CIncrease in the use of redundant processes

An increase in redundant processes might occur if the new application doesn't integrate well or isn't used effectively, but the core failure is not meeting the initial requirements for which it was built.

DThe application could fail to meet defined business requirementsCorrect

User acceptance testing (UAT) is specifically designed to validate that a new application meets the defined business requirements and is fit for purpose from an end-user perspective. Without UAT, there is a high risk that the application, despite technical functionality, will not align with user workflows or adequately support business objectives, leading to user dissatisfaction and operational inefficiencies.

Concept tested: Purpose of User Acceptance Testing (UAT)

Source: https://www.ibm.com/topics/user-acceptance-testing

Topics

#User Acceptance Testing (UAT)#Application Implementation Risks#Business Requirements#Project Failure

Community Discussion

No community discussion yet for this question.

Full CRISC Practice