Home › MCQs › CISA › Question #6837
Back to Questions
CISA QUESTION #6837
Question 1
An IS auditor reviews project management for a major system implementation. The project is 6 months behind schedule, 200% over budget, and key requirements have been descoped without business owner approval. What is the MOST critical governance failure?
  • Poor time management
  • Lack of project oversight and stakeholder engagement in critical decisions✔️
  • Inadequate budgeting
  • Insufficient technical resources
Correct Answer Explanation
Removing key requirements without business owner approval represents a fundamental governance breakdown. The business owns requirements, and descoping them without approval means the delivered system may not meet business needs. This indicates lack of oversight, poor stakeholder management, and potential project failure.