Exam CISA All QuestionsBrowse all questions from this exam
Question 847

In a review of the organization standards and guidelines for IT management, which of the following should be included in an IS development methodology?

    Correct Answer: A

    An IS development methodology should include risk management techniques. Risk management is crucial because it helps identify, assess, and mitigate risks that could potentially impact the successful development and deployment of an information system. It ensures that any potential threats to the project are managed proactively to maintain security, functionality, and compliance with organizational standards.

Discussion
TEC1Option: A

A. Risk management techniques should be included in an IS development methodology. It is important to consider and address the potential risks associated with any new IT system development project to ensure that it is secure and meets the organization's security requirements. Additionally, access control rules (B) and incident management techniques (D) may also be important to consider in the development methodology to ensure secure and effective operation of the system. Value-added activity analysis (C) may be relevant to the overall project management, but it is not specifically related to the IS development methodology.

SwallowsOption: A

A. Risk management techniques should be included in an IS development methodology to ensure that risks are effectively managed and mitigated throughout the software and system development lifecycle.

SuperMax

When reviewing organization standards and guidelines for IT management, an IS (Information Systems) development methodology should include various components to ensure effective development and management of information systems. Among the options provided: A. Risk management techniques: This is important in IS development as it helps identify and mitigate potential risks and uncertainties associated with the project. B. Access control rules: Access control is crucial for information security, and it should be integrated into the development methodology to ensure that only authorized individuals have access to sensitive data and systems. So, among the options provided, both A (Risk management techniques) and B (Access control rules) should be included in an IS development methodology to ensure the security, resilience, and success of information system development projects.