IS acquisition, development, and implementation controls, including project management and change control, tested on the CISA exam.
35 cards · basic cards · AI-written, checked twice. Edit anything.
- What is the primary purpose of conducting a feasibility study during IS acquisition?
- To assess whether a proposed system is technically and economically viable before proceeding to full development or purchase.
- Which document outlines specific system functionality and performance requirements in an IS acquisition?
- A requirements specification (or system requirements document).
- What is the purpose of a Request for Proposal (RFP) in IS acquisition?
- To solicit detailed solutions and pricing from potential vendors based on defined organizational requirements.
- What dimensions should be evaluated during vendor selection for an IS acquisition?
- Financial stability, technical capability, references, support capabilities, implementation experience, and cost.
- What is a Software Escrow agreement?
- An arrangement where source code is held by a third party and released to the customer if the vendor fails to maintain or support the software.
- What is the purpose of a Service Level Agreement (SLA) in vendor contracts?
- To define expected performance levels, availability, response times, and remedies for breaches between the customer and vendor.
- What is the System Development Lifecycle (SDLC)?
- A structured process for planning, designing, developing, testing, and implementing information systems.
- Name four common phases of the SDLC.
- Requirements, design, development (coding), testing, and implementation.
- What is accomplished during the system design phase of the SDLC?
- Creating detailed technical specifications for how the system will be built, including architecture, data structures, and interfaces.
- What is the purpose of code review in system development?
- To have other developers examine code for defects, security vulnerabilities, compliance with standards, and improvement opportunities.
- What is static code analysis?
- Automated examination of source code without executing it to identify defects, security issues, and coding standard violations.
- Define unit testing in system development.
- Testing individual components or functions by the developer to ensure each part works as designed in isolation.
- What is integration testing?
- Testing the interaction between multiple components or modules to ensure they work together correctly.
- What is system testing?
- Testing the complete integrated system against requirements to verify it meets functional and non-functional specifications.
- What is User Acceptance Testing (UAT)?
- Testing performed by end users to verify that the system meets their business requirements before production deployment.
FlashKeepers