CISA Practice Question: Information Systems Acquisition, Development, and Implementation
Which of the following is a key objective of a post-implementation review?
⚠ Common exam trap
CISA often tests the timing and purpose of PIR, and the trap is confusing it with other project phases like testing, budgeting, or vendor selection.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To determine if the system meets user requirements
The key objective of a post-implementation review (PIR) is to determine whether the system meets user requirements and delivers the expected benefits. It evaluates the project's success against its original objectives, including functionality, performance, and user satisfaction. This helps the organization learn and improve future projects.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To conduct penetration testing
Why it's wrong here
Penetration testing is a security assurance activity performed during development or operations, not the objective of a post-implementation review. It tempts because reviews may recommend further testing, but the review itself assesses whether the system met business objectives and delivered expected benefits.
- ✗
To approve the project budget
Why it's wrong here
Budget approval occurs before or during the project, whereas a post-implementation review evaluates whether delivered outcomes met objectives and benefits. It tempts because cost is reviewed retrospectively, but approval is a governance gate, not the review's objective.
- ✓
To determine if the system meets user requirements
Why this is correct
A post-implementation review compares delivered functionality against the original business case and user requirements, confirming the system actually delivers intended benefits. This satisfies the stem's objective of verifying that user requirements were met after go-live.
- ✗
To select the vendor
Why it's wrong here
Vendor selection happens during procurement, well before implementation, so it cannot be a post-implementation review objective. It tempts because reviews examine vendor performance, but selecting a vendor is a sourcing decision, not retrospective evaluation of delivered benefits.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CISA question from scratch — 934 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISACA exam blueprint
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.