CISA Exam Question: Mainframe Computer Replacement - IS Auditor's Primary Concern

Primary Concern for an IS Auditor

Prev Question Next Question

Question

An organization has purchased a replacement mainframe computer to cope with the demands of increased business.

Which of the following should be the PRIMARY concern of an IS auditor?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C.

The primary concern of an IS auditor regarding the purchase of a replacement mainframe computer to cope with the demands of increased business would be to ensure that the organization has reviewed and updated its disaster recovery plan (Answer A).

A disaster recovery plan is a critical component of an organization's overall business continuity plan, and it outlines the steps to be taken to restore critical IT systems and applications in the event of a disaster or disruption. The replacement of a mainframe computer could potentially lead to changes in the disaster recovery plan, as the new system may have different requirements and configurations compared to the previous one. As such, it is important for the organization to review and update its disaster recovery plan to ensure that it remains effective and relevant.

While application access controls (Answer B) are important, they are not the primary concern in this scenario, as the replacement of a mainframe computer would not necessarily impact the existing access controls.

Similarly, appropriate tender evaluation processes (Answer C) and staying within the planned budget for the year (Answer D) are important considerations, but they are not the primary concern of an IS auditor in this scenario.

Therefore, Answer A is the most appropriate and relevant response for the IS auditor to prioritize in this situation.