CISA: Certified Information Systems Auditor

By Isaca · Question Mode

QuestionQ42

Information Systems Acquisition, Development and Implementation

An organization has outsourced development of a core application but plans to return its support and future maintenance to an in-house team. Which finding should be of GREATEST concern to the IS auditor?

Explanation

Clear data-model documentation is essential for internal personnel to understand data structures, relationships, dependencies, and integrity constraints when supporting and modifying an application. Its absence creates substantial operational and maintenance risk during an in-house transition.

Community Discussion

No comments yet. Be the first to start the discussion!