CISA Practice Question: Information Systems Operations and Business Resilience
An IS auditor is reviewing the release management process for a critical application. The release strategy includes a phased rollout to 10% of users initially, then 50%, then 100%. The first phase revealed a data integrity issue that affected a subset of transactions. The release manager decided to continue with the next phase while a patch was being developed. What should the auditor most recommend?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Halt the rollout until the data integrity issue is resolved.
Continuing the rollout while a data integrity issue exists could affect more users. Best practice is to halt the rollout until the issue is resolved and patched, to prevent further impact and ensure the fix is effective.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Document the issue as a known error and proceed.
Why it's wrong here
Known errors should be addressed, not bypassed.
- ✗
Accelerate the rollout to quickly identify all issues.
Why it's wrong here
Accelerating would increase risk and impact more users.
- ✗
Increase testing in the next phase to catch issues earlier.
Why it's wrong here
Testing is important, but the immediate action should be to stop the rollout.
- ✓
Halt the rollout until the data integrity issue is resolved.
Why this is correct
Halting prevents further damage and ensures the fix is applied before broader deployment.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 995 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.