nerdexam
Isaca

CRISC · Question #435

The software version of an enterprise's critical business application has reached end-of-life and is no longer supported by the vendor. IT has decided to develop an in-house replacement application…

The correct answer is D. The business process owner is not an active participant. The primary concern when developing an in-house replacement for a critical business application is ensuring the active participation of the business process owner to align the new application with business needs and processes.

Submitted by ravi_2018· Apr 18, 2026Governance

Question

The software version of an enterprise's critical business application has reached end-of-life and is no longer supported by the vendor. IT has decided to develop an in-house replacement application. Which of the following should be the PRIMARY concern?

Options

  • AThe system documentation is not available.
  • BEnterprise risk management (ERM) has not approved the decision.
  • CThe board of directors has not approved the decision.
  • DThe business process owner is not an active participant.

How the community answered

(17 responses)
  • A
    35% (6)
  • B
    6% (1)
  • C
    18% (3)
  • D
    41% (7)

Why each option

The primary concern when developing an in-house replacement for a critical business application is ensuring the active participation of the business process owner to align the new application with business needs and processes.

AThe system documentation is not available.

While system documentation is important for development and maintenance, lack of documentation presents a technical challenge, whereas lack of business alignment (via the process owner) can lead to an unusable or ineffective solution.

BEnterprise risk management (ERM) has not approved the decision.

ERM approval is important for risk governance, but the *primary* concern for the *success* and *relevance* of the application itself lies with the business owner defining its requirements and ensuring operational fit.

CThe board of directors has not approved the decision.

The board of directors typically approves strategic initiatives at a high level but is not directly involved in ensuring the operational fit and detailed requirements of a specific application, which is the role of the business process owner.

DThe business process owner is not an active participant.Correct

The business process owner possesses critical knowledge of how the application supports core business functions, workflows, and requirements. Their active participation throughout development is essential to ensure the in-house replacement accurately meets operational needs, avoids functional gaps, and secures business adoption, making it the primary factor for a successful and relevant replacement solution.

Concept tested: Stakeholder engagement in system development

Source: https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/plan/stakeholders

Topics

#IT Project Governance#Business-IT Alignment#Stakeholder Management#Critical Application Risk

Community Discussion

No community discussion yet for this question.

Full CRISC Practice