IS acquisition, development, and implementation controls, including project management and change control, tested on the CISA exam.
35 cards · basic cards · AI-written, checked twice. Edit anything.
- What is the primary purpose of conducting a feasibility study during IS acquisition?
Show answer
To assess whether a proposed system is technically and economically viable before proceeding to full development or purchase.- Which document outlines specific system functionality and performance requirements in an IS acquisition?
Show answer
A requirements specification (or system requirements document).- What is the purpose of a Request for Proposal (RFP) in IS acquisition?
Show answer
To solicit detailed solutions and pricing from potential vendors based on defined organizational requirements.- What dimensions should be evaluated during vendor selection for an IS acquisition?
Show answer
Financial stability, technical capability, references, support capabilities, implementation experience, and cost.- What is a Software Escrow agreement?
Show answer
An arrangement where source code is held by a third party and released to the customer if the vendor fails to maintain or support the software.- What is the purpose of a Service Level Agreement (SLA) in vendor contracts?
Show answer
To define expected performance levels, availability, response times, and remedies for breaches between the customer and vendor.- What is the System Development Lifecycle (SDLC)?
Show answer
A structured process for planning, designing, developing, testing, and implementing information systems.- Name four common phases of the SDLC.
Show answer
Requirements, design, development (coding), testing, and implementation.- What is accomplished during the system design phase of the SDLC?
Show answer
Creating detailed technical specifications for how the system will be built, including architecture, data structures, and interfaces.- What is the purpose of code review in system development?
Show answer
To have other developers examine code for defects, security vulnerabilities, compliance with standards, and improvement opportunities.- What is static code analysis?
Show answer
Automated examination of source code without executing it to identify defects, security issues, and coding standard violations.- Define unit testing in system development.
Show answer
Testing individual components or functions by the developer to ensure each part works as designed in isolation.- What is integration testing?
Show answer
Testing the interaction between multiple components or modules to ensure they work together correctly.- What is system testing?
Show answer
Testing the complete integrated system against requirements to verify it meets functional and non-functional specifications.- What is User Acceptance Testing (UAT)?
Show answer
Testing performed by end users to verify that the system meets their business requirements before production deployment.
FlashKeepers