During a post-implementation review of an enterprise
resource management system, an IS auditor would MOST likely:

A. review access control configuration.

B. evaluate interface testing.

C. review detailed design documentation.

D. evaluate system testing.

Answer Posted / guest

Answer: A

Reviewing access control configuration would be first task
performed to determine whether security has been mapped
appropriately in the system. Since a post-implementation
review is done after user acceptance testing and actual
implementation, one would not engage in interface testing or
detailed design documentation. Evaluating interface testing
would be part of the implementation process. The issue of
reviewing detailed design documentation is not generally
relevant to an enterprise resource management system since
these are usually vendor packages with user manuals. System
testing should be performed before final user sign off.

Is This Answer Correct ?    6 Yes 0 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

WHICH OF THE FOLLOWING IS OFTEN AN ADVANTAGE OF USING PROTOTYPING GOR DYDTEM DVELOPMENT

2975


purchase orders issued to vendors have been authorized as per the authorization matrix

1207