hardMultiple SelectObjective-mapped
CISA Is implementing a new cloud-based HR system Practice Question
An organization is implementing a new cloud-based HR system. The project sponsor wants to skip regular project status meetings to speed up delivery. Which THREE of the following are the MOST significant risks of eliminating these meetings?
⚠ Common exam trap
Many exam-takers confuse the purpose of status meetings with other project management artifacts, assuming that documentation alone (e.g., project plans, risk registers) can substitute for the real-time communication and decision-making that occurs in these meetings.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Stakeholders may be unaware of critical project issues.
Eliminating regular project status meetings removes a key communication channel for escalating critical project issues to stakeholders. Without these meetings, stakeholders may not receive timely updates on security vulnerabilities, integration failures, or compliance gaps in the cloud-based HR system, leading to delayed remediation and potential data breaches.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Security requirements may be overlooked.
Why it's wrong here
Security requirements should be defined early, not in status meetings.
- ✓
Stakeholders may be unaware of critical project issues.
Why this is correct
Meetings are key for issue communication.
- ✗
Budget overruns may go unnoticed until the end.
Why it's wrong here
Budget tracking can be done via other means.
- ✓
Important decisions may not be documented or communicated.
Why this is correct
Meetings provide a forum for decision documentation.
- ✓
Dependencies between project tasks may not be properly managed.
Why this is correct
Meetings help identify and resolve dependencies.
Go deeper
Related to this question
About these practice questions
This CISA question is part of Courseiva's 995-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.