Which of the following is the BEST indication to an IS auditor that management's post-implementation review was effective?
Which of the following is the BEST indication to an IS auditor that management's post-implementation review was effective?
The best indication that management's post-implementation review was effective is that lessons learned were documented and applied. This suggests that the review was not merely a formality but led to actual improvements and refinements in processes or systems, demonstrating a commitment to learning and continuous improvement.
While option D (Business and IT stakeholders participated in the post-implementation review) is important, actually documenting learnings and incorporating them into implementation provides more concrete evidence of an effective review.
B. Lessons learned were documented and applied. This option indicates that not only were lessons learned during the post-implementation review process, but they were also documented and put into practice. This demonstrates that the review was not just a procedural formality but had a meaningful impact on improving processes and systems. It implies that the organization is committed to continuous improvement and learning from past experiences, which is a key aspect of effective post-implementation reviews.