CISA Certified Information Systems Auditor – Question0747

An IS auditor is involved in the user testing phase of a development project. The developers wish to use a copy of a peak volume transaction file from the production process to show that the development can cope with the required volume. What is the auditor’s PRIMARY concern?

A.
Sensitive production data may be read by unauthorized persons.
B. The error-handling and credibility checks may not be fully proven.
C. Users may not wish for production data to be made available for testing.
D. All functionality of the new process may not be tested.

Correct Answer: A