Which of the following is MOST important for an IS auditor to understand when reviewing this decision?

An organization’s enterprise architecture (EA) department decides to change a legacy system’s components while maintaining its original functionality.

Which of the following is MOST important for an IS auditor to understand when reviewing this decision?
A . The current business capabilities delivered by the legacy system
B . The proposed network topology to be used by the redesigned system
C . The data flows between the components to be used by the redesigned system
D . The database entity relationships within the legacy system

View Answer

Answer: A

Explanation:

When reviewing an enterprise architecture (EA) department’s decision to change a legacy system’s components while maintaining its original functionality, an IS auditor should understand the current

business capabilities delivered by the legacy system, as this would help to evaluate whether the change is justified, feasible, and aligned with the business goals and needs. The proposed network topology to be used by the redesigned system, the data flows between the components to be used by the redesigned system, and the database entity relationships within the legacy system are technical details that are less relevant for an IS auditor to understand when reviewing this decision.

References: CISA Review Manual (Digital Version), Chapter 3, Section 3.2