CISA Practice Question: Information Systems Acquisition, Development, and Implementation
An organization is implementing a large ERP system. The project team plans to migrate legacy data to the new system. Which of the following is the MOST significant risk associated with data migration?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Inaccurate data mapping between legacy and new systems
Data migration often involves mapping old data to new structures. Inaccurate mapping can lead to data corruption or loss, which is a critical risk.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Insufficient training of end users
Why it's wrong here
End-user training determines adoption and operational competence after go-live, not whether legacy records transfer accurately. It is tempting because poor training genuinely causes ERP failure, and it would be the leading risk during the rollout and change-management phase, not the data migration activity itself.
- ✗
Lack of executive sponsorship
Why it's wrong here
Executive sponsorship affects project governance and funding across the whole ERP programme, not the mechanics of moving legacy records. It is tempting because weak sponsorship genuinely derails large programmes, and it would be the primary risk when the initiative lacks strategic backing, rather than during data migration itself.
- ✗
Inadequate segregation of duties in the new system
Why it's wrong here
Segregation of duties concerns access design within the new ERP, not the transfer of legacy records; it persists regardless of migration quality. It is tempting because SoD is a genuine ERP control risk, and it would be the key concern when configuring roles and permissions after go-live, not during data migration.
- ✓
Inaccurate data mapping between legacy and new systems
Why this is correct
Mapping errors propagate corrupted or misaligned values into the new ERP, so migrated records may be incomplete or wrongly attributed. Because mapping defects are systemic, they affect entire data sets rather than isolated rows, undermining financial reporting and downstream processing long after go-live.
Go deeper
Related to this question
About these practice questions
One of 934 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.