Audit

A company is implementing a new version control system, but key personnel lack training. What should the auditor recommend?

• Proceed with implementation as scheduled.   

• Conduct training sessions for key personnel

• Implement the system with post-training follow-ups

• Use the system without training

• Cancel the version control system project

During a review, an IT auditor finds that several changes lack impact assessments. What is the auditor's best course of action?

• Approve the changes if they appear minor.   

• Ignore the changes if no immediate issues are detected

• Recommend a process update to enforce mandatory assessments

• Ensure future assessments are aligned with company policies

• Flag the changes for management review

How should emergency changes be handled?

• Ignore compliance requirements

• Implement changes without compromising system security

• Apply the same level of testing as regular changes whenever possible

• Define and document what constitutes an emergency

• Allow changes without any review

What is a key responsibility of the Change Control Management Board?

• Evaluating the criticality and resource availability for changes.

• Approving all changes without assessments.   

• Handling unauthorized system access issues.   

• Discussing cumulative effects of all proposed changes.   

• Developing emergency software fixes

List three steps involved in building an IT Balanced Scorecard:

   

• Completing the scorecard in one step without feedback from management. 

• Only selecting high-risk IT projects for the scorecard.   

• The steps include: (1) involving senior and IT management from the start, (2) analyzing data related to corporate strategy and potential metrics, and (3) developing and revising the scorecard based on objectives.

• Steps in building an IT Balanced Scorecard include gaining support from senior management, defining objectives for each perspective, and obtaining feedback for revisions.   

• Conducting user surveys, reducing IT costs, and outsourcing IT operations.   

The role of the auditor in project management depends on:

• The organization's culture. 

• The maturity of the information systems function.

• The size of the project team.   

• The complexity of the organization's IT systems.   

Which organization developed the PMBOK Guide?

- A) Project Management Institute (PMI). (Correct Answer)   

- B) Gartner Group.   

- C) ISO.   

- D) ISACA.   

- E) NIST.   

• Project Management Institute (PMI).

• Gartner Group.   

• ISO

• ISACA

• NIST

During an audit, you observe outdated tools being used for tracking milestones. How do you address this?

• Report this as an external IT issue.   

• Evaluate the impact on the project and recommend upgrades.

• Report the risks caused by using outdated tools.   

• Ignore tool-related issues if progress is on track.   

• Ensure the team sticks with existing tools

What is the objective of project management audit?

• Ensuring documentation and training for users.   

• Reducing audit costs. 

• Focusing exclusively on system uptime. 

• Early identification of issues that may hinder implementation.

• Achieving 100% budget accuracy.   

Which is NOT listed as a factor for effective project management?

 

• Planning

• Oversight and tracking.   

• Use of project management tools. 

• Resource management.   

• Adherence to a single leadership style.