Which of the following is the BEST time for an IS auditor to perform a post-implementation review?
Click on the arrows to vote for the correct answer
A. B. C. D.A.
The BEST time for an IS auditor to perform a post-implementation review is when the system has stabilized. Option A is the correct answer.
Explanation:
A post-implementation review (PIR) is a comprehensive review of a new or modified system after it has been implemented to ensure that it meets the organization's needs and objectives, as well as to identify any deficiencies and make recommendations for improvement.
Performing a PIR immediately after the new system goes into production (option D) is not the best time because it may take some time for the system to stabilize and for users to become familiar with it. Rushing into a review immediately after implementation may not provide an accurate assessment of the system's functionality, and may lead to incomplete and incorrect conclusions.
After the completion of user testing (option B) is also not the best time for a PIR because the purpose of user testing is to identify and resolve issues before the system is deployed, whereas the PIR is conducted after the system has been deployed to ensure it meets the organization's needs and objectives.
Before decommissioning the legacy system (option C) is not the best time for a PIR because it is focused on the old system, whereas the PIR is focused on the new system. The timing of the PIR should be independent of the legacy system's status.
Therefore, the best time for an IS auditor to perform a PIR is when the new system has stabilized, which means that users have had sufficient time to use the system and provide feedback, and any initial issues have been resolved. This will ensure that the review is comprehensive and that the findings are accurate and relevant to the system's current state.