Information Systems Acquisition, Development, and Implementation →hardMultiple ChoiceObjective-mapped
CISA Practice Question: Information Systems Acquisition, Development, and Implementation
An organization is using a spiral model for a high-risk project. The IS auditor wants to ensure that risk assessment is performed at each iteration. Which of the following is the BEST evidence that this control is effective?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Each spiral iteration includes a risk analysis document
In the spiral model, each cycle includes risk analysis; documented risk assessments in iteration artifacts demonstrate this.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The project schedule shows spiral iterations
Why it's wrong here
Schedule alone doesn't confirm risk assessment content.
- ✓
Each spiral iteration includes a risk analysis document
Why this is correct
Documented risk analysis is direct evidence of the control.
- ✗
The project manager has a risk management plan
Why it's wrong here
A plan without execution is insufficient.
- ✗
The system has passed user acceptance testing
Why it's wrong here
UAT occurs late; risk assessment should happen earlier.
Go deeper
Related to this question
About these practice questions
One of 995 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.