When reviewing a newly implemented quality management system (QMS), which of the following should be the IS auditor's PRIMARY concern?
Click on the arrows to vote for the correct answer
A. B. C. D.D.
When reviewing a newly implemented quality management system (QMS), the IS auditor's primary concern should be whether the QMS is mapped to some core business processes. Therefore, option D is the correct answer.
A quality management system is designed to ensure that the organization's products or services meet or exceed customer expectations. Therefore, it should be mapped to some core business processes to achieve this objective. This mapping helps to identify the processes that require improvement, and the QMS should be able to provide support in improving these processes. If the QMS is not mapped to some core business processes, it may not be effective in achieving its objectives, and the organization may not derive the expected benefits.
Option A is not the primary concern since the QMS benefit measures not being included in the business case may affect the return on investment (ROI) of the project, but it does not necessarily indicate that the QMS is ineffective.
Option B is also not the primary concern since the QMS testing methodology not being clearly documented may lead to issues during testing, but it does not necessarily indicate that the QMS is ineffective.
Option C is important, but not the primary concern since the post-implementation review (PIR) is a retrospective assessment of the effectiveness of the QMS. The primary concern is to ensure that the QMS is mapped to some core business processes to achieve its objectives.