An organization has outsourced the development of a core application. However, the organization plans to bring the support and future maintenance of the application back in-house. Which of the following findings should be the IS auditor's GREATEST concern?
The greatest concern in this scenario is the data model not being clearly documented. When an organization plans to bring the support and future maintenance of a core application in-house, it is crucial that the internal team has a comprehensive understanding of how the application is structured and functions. Without a well-documented data model, the internal team may face significant challenges in maintaining the application, addressing issues, and incorporating new features. Effective documentation is key to ensuring a smooth transition and continuous support for the application.
B would be correct if the panning to outsource. In this scenario the plan is to bring dev in-house. Xorrect answer is A
Answer: B
This is the greatest concern as it can significantly impact the organization's ability to maintain and support the application. Without clear documentation of the data model, the organization may struggle to understand the application's structure, which can make it challenging to fix issues or develop new features. Before transitioning support and future maintenance in-house, the organization should ensure that the data model is clearly documented and that the in-house team understands it thoroughly.
The IS auditor’s GREATEST concern in this scenario should be B. The vendor development team is located overseas1. While all the options are relevant considerations, the location of the vendor development team can significantly impact communication, collaboration, and responsiveness. Outsourcing to an overseas team may introduce challenges related to time zones, language barriers, cultural differences, and coordination difficulties. These factors can affect the quality of support and future maintenance when the organization brings the application back in-house.
A. The data model is not clearly documented.