CISA Practice Question: Information Systems Acquisition, Development, and Implementation
During an agile software development project, a sprint review meeting is conducted. What is the PRIMARY purpose of this meeting from an IS audit perspective?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To demonstrate the working product increment to stakeholders and gather feedback
The sprint review is a key control in agile to demonstrate completed work to stakeholders and obtain feedback. It serves as a form of user acceptance testing and helps ensure the product meets stakeholder needs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To identify and document lessons learned for process improvement
Why it's wrong here
Lessons learned are captured in the sprint retrospective, which examines process and team dynamics. The review instead demonstrates the completed increment to stakeholders for feedback and acceptance, which is the audit-relevant evidence of delivered functionality.
- ✓
To demonstrate the working product increment to stakeholders and gather feedback
Why this is correct
The sprint review inspects the completed increment against acceptance criteria, giving stakeholders tangible evidence of progress and a forum to raise issues. This transparency lets auditors verify that delivered functionality matches requirements rather than relying solely on documentation.
- ✗
To assign tasks to team members for the current sprint
Why it's wrong here
Task assignment happens in sprint planning, not the review, which inspects the increment with stakeholders. Auditors value the review for verifying delivered work against acceptance criteria, so treating it as a scheduling session misses the evidence-gathering purpose entirely.
- ✗
To plan the tasks for the next sprint
Why it's wrong here
Planning the next sprint occurs in sprint planning, where backlog items are selected and estimated. The review closes the current sprint by inspecting the increment with stakeholders, so auditors use it to confirm that delivered work matches agreed acceptance criteria.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CISA question from scratch — 934 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.