CISA Practice Question: Information Systems Acquisition, Development, and Implementation
An IS auditor is reviewing a project to implement a new customer relationship management (CRM) system. The project manager has created a work breakdown structure (WBS) and a Gantt chart. Which of the following should the auditor verify to ensure the project schedule is realistic?
⚠ Common exam trap
The trap here is assuming that a detailed Gantt chart alone guarantees a realistic schedule, without verifying that the WBS is complete and dependencies are correctly modeled.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The WBS includes all deliverables and the Gantt chart reflects dependencies and resource availability.
A realistic project schedule requires a complete work breakdown structure that captures all deliverables and a Gantt chart that accurately reflects task dependencies and resource availability. Without these elements, the schedule may be unachievable. The auditor should focus on the schedule's underlying assumptions and structure rather than ancillary factors like budget approval or software usage.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The project manager has used project management software to create the schedule.
Why it's wrong here
Using software does not guarantee a realistic schedule. The tool can produce a schedule based on flawed inputs, such as missing dependencies or overallocated resources. The auditor must examine the underlying data and assumptions, not the tool itself, to determine if the schedule is achievable and properly sequenced.
- ✗
The schedule includes contingency reserves for known risks.
Why it's wrong here
Contingency reserves address known risks but do not ensure the base schedule is realistic. If the underlying estimates or dependencies are wrong, reserves may be insufficient. The auditor should first verify the schedule's foundation—complete WBS and accurate dependencies—before considering reserves as a mitigating factor.
- ✓
The WBS includes all deliverables and the Gantt chart reflects dependencies and resource availability.
Why this is correct
A realistic schedule depends on a complete WBS that captures all deliverables and a Gantt chart that accurately models task dependencies and resource constraints. Without this, the schedule may be optimistic. The auditor should verify that the WBS is comprehensive and that the Gantt chart reflects logical sequencing and resource calendars, ensuring the timeline is achievable.
- ✗
The project budget is aligned with the schedule and approved by the steering committee.
Why it's wrong here
While budget alignment is important, it does not directly validate the realism of the schedule. A budget can be approved but still be insufficient for the schedule if resource rates or effort estimates are wrong. The auditor should focus on the schedule's construction, not just its financial approval, to assess whether the timeline is feasible.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CISA question from scratch — 934 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISACA exam blueprint
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.