CISA Certified Information Systems Auditor – Question0261

When reviewing a newly implemented quality management system (QMS), which of the following should be the IS auditor’s PRIMARY concern?

A.
The QMS benefit measures were not included in the business case.
B. The QMS testing methodology is not clearly documented.
C. The QMS post-implementation review (PIR) has not been finalized.
D. The QMS is not mapped to some core business processes.

Correct Answer: D