Which of the following is the BEST indication to an IS auditor that management's post-implementation review was effective?
Which of the following is the BEST indication to an IS auditor that management's post-implementation review was effective?
The best indication that management's post-implementation review was effective is that lessons learned were documented and applied. This suggests that the review was not merely a formality but led to actual improvements and refinements in processes or systems, demonstrating a commitment to learning and continuous improvement.
B. Lessons learned were documented and applied. This option indicates that not only were lessons learned during the post-implementation review process, but they were also documented and put into practice. This demonstrates that the review was not just a procedural formality but had a meaningful impact on improving processes and systems. It implies that the organization is committed to continuous improvement and learning from past experiences, which is a key aspect of effective post-implementation reviews.
While option D (Business and IT stakeholders participated in the post-implementation review) is important, actually documenting learnings and incorporating them into implementation provides more concrete evidence of an effective review.