easyMultiple ChoiceObjective-mapped
CISA Practice Question: Is selecting a vendor for a new enterprise…
An organization is selecting a vendor for a new enterprise resource planning (ERP) system. Which of the following is the MOST critical factor in the vendor selection process?
⚠ Common exam trap
The trap here is that candidates often prioritize contractual or due diligence activities (like SLAs or financial checks) over the foundational step of requirements definition, mistakenly believing that vendor evaluation can proceed without a clear, documented baseline of what the system must accomplish.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Clearly define business requirements before issuing the request for proposal (RFP).
Clearly defining business requirements before issuing the RFP is the most critical factor because it ensures that the ERP system will align with the organization's operational needs, processes, and data flows. Without a precise requirements definition, the RFP will lack the necessary evaluation criteria, leading to mismatched vendor proposals, scope creep, and potential project failure. This step directly impacts the success of the acquisition, as it forms the foundation for all subsequent vendor evaluation and contract negotiations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Negotiate service level agreements (SLAs) in the contract.
Why it's wrong here
SLAs come after vendor selection.
- ✗
Check vendor references for similar projects.
Why it's wrong here
References are useful but not as foundational as requirements.
- ✓
Clearly define business requirements before issuing the request for proposal (RFP).
Why this is correct
Defining requirements ensures the RFP elicits relevant vendor responses.
- ✗
Evaluate vendor financial stability.
Why it's wrong here
Financial stability is important but not the most critical; requirements drive selection.
Go deeper
Related to this question
About these practice questions
One of 995 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.