Information Systems Acquisition, Development, and Implementation →easyMultiple ChoiceObjective-mapped
CISA Practice Question: Information Systems Acquisition, Development, and Implementation
During an agile software development project, which of the following events provides the best opportunity for the IS auditor to assess the effectiveness of controls implemented in the current sprint?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Sprint review
The sprint review is a demonstration of working software where controls can be observed. The retrospective is about process improvement, not control assessment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Sprint planning meeting
Why it's wrong here
Sprint planning defines the backlog, but does not demonstrate controls.
- ✓
Sprint review
Why this is correct
The sprint review allows the auditor to see working functionality and verify controls.
- ✗
Daily standup meeting
Why it's wrong here
Daily standups are for coordination, not control assessment.
- ✗
Sprint retrospective
Why it's wrong here
The retrospective focuses on process improvement, not control verification.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CISA question from scratch — 995 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.