CISA Certified Information Systems Auditor – Question2910

Business units are concerned about the performance of a newly implemented system. Which of the following should an IS auditor recommend?

A.
Develop a baseline and monitor system usage.
B. Define alternate processing procedures.
C. Prepare the maintenance manual.
D. implement the changes users have suggested.

Correct Answer: A

Explanation:

Explanation:
An IS auditor should recommend the development of a performance baseline and monitor the system’s performance, against the baseline, to develop empirical data upon which decisions for modifying the system can be made. Alternate processing procedures and a maintenance manual will not alter a system’s performance. Implementing changes without knowledge of the cause(s) for the perceived poor performance may not result in a more efficient system.