CISA Certified Information Systems Auditor – Question2011

As part of a post-implementation review, the BEST way to assess the realization of outcomes is by:

A.
obtaining feedback from the user community.
B. performing a comprehensive risk analysis.
C. evaluating the actual performance of the system.
D. comparing the business case benefits to the achieved benefits.

Correct Answer: D