Greatest Concern of IS Auditor for Core Application Development Outsourcing

D.

In this scenario, the organization has outsourced the development of a core application, but it plans to bring support and maintenance back in-house. The IS auditor's primary concern would be identifying potential risks or challenges associated with the transition. The most significant concern would be the one that poses the greatest risk to the organization's ability to manage the application effectively after the transition.

A. A training plan for business users has not been developed.

This is a concern, but it is not the IS auditor's greatest concern. A training plan for business users is essential for ensuring that they can use the application effectively. However, this is not directly related to the transition back in-house. If necessary, the training plan can be developed after the transition.

B. The cost of outsourcing is lower than in-house development.

While cost is always a concern, it is not the greatest concern in this scenario. The organization has already decided to bring the support and future maintenance of the application back in-house, which suggests that cost is not the primary driver for this decision.

C. The vendor development team is located overseas.

This is a concern as it can create communication and coordination challenges. However, it is not the greatest concern in this scenario. The vendor development team location should have been a consideration during the outsourcing decision. After the transition back in-house, the organization can manage the development team in-house or look for a new vendor if needed.

D. The data model is not dearly documented.

This is the greatest concern as it can significantly impact the organization's ability to maintain and support the application. Without clear documentation of the data model, the organization may struggle to understand the application's structure, which can make it challenging to fix issues or develop new features. Before transitioning support and future maintenance in-house, the organization should ensure that the data model is clearly documented and that the in-house team understands it thoroughly.

In summary, the IS auditor's greatest concern in this scenario would be the lack of clear documentation of the application's data model.