CISA Practice Question: Information Systems Acquisition, Development, and Implementation
An IS auditor is reviewing a software development project that follows the waterfall model. Which of the following is the MAIN advantage of this methodology?
⚠ Common exam trap
CISA often tests the confusion between waterfall's documentation/milestone strength and agile's flexibility/early-delivery strength, causing candidates to pick an agile benefit as a waterfall advantage.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Clear milestones and documentation at each phase
The waterfall model is a sequential, plan-driven methodology where each phase (requirements, design, development, testing, deployment) is completed before the next begins. Its main advantage is that it produces clear, well-defined milestones and comprehensive documentation at each phase, which supports auditability, contractual clarity, and formal sign-off. This makes it attractive for projects with stable, well-understood requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Reduced risk of requirements misinterpretation
Why it's wrong here
Waterfall's single upfront requirements phase, validated through formal sign-off, actually increases the chance that misunderstood requirements persist undetected until testing. Prototyping and iterative review reduce misinterpretation; waterfall's sequential handoffs delay feedback, so this is not its advantage.
- ✓
Clear milestones and documentation at each phase
Why this is correct
Waterfall's sequential phases each conclude with defined deliverables and sign-off, producing explicit milestones and documentation. This satisfies the auditor's need for verifiable phase-gate evidence and traceability, since requirements are frozen before design begins and each stage's completion is formally recorded.
- ✗
Early delivery of working software increments
Why it's wrong here
Waterfall delivers one consolidated product at the end of sequential phases, so no working increments appear early. Iterative and agile methods exist precisely to ship incremental functionality, which is why this advantage is attributed to them rather than to a linear, phase-gated lifecycle.
- ✗
Ability to accommodate changing requirements easily
Why it's wrong here
Waterfall freezes requirements after the analysis phase, so late changes demand costly rework of completed phases. Agile and iterative approaches absorb evolving requirements through short cycles; that flexibility is their defining strength, not a property of a sequential model with baselined specifications.
Go deeper
Related to this question
About these practice questions
One of 934 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISACA exam blueprint
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.