ExamGecko
Question list
Search
Search

Related questions











Question 260 - CISA discussion

Report
Export

Which of the following should an IS auditor consider the MOST significant risk associated with a new health records system that replaces a legacy system?

A.
Staff were not involved in the procurement process, creating user resistance to the new system.
Answers
A.
Staff were not involved in the procurement process, creating user resistance to the new system.
B.
Data is not converted correctly, resulting in inaccurate patient records.
Answers
B.
Data is not converted correctly, resulting in inaccurate patient records.
C.
The deployment project experienced significant overruns, exceeding budget projections.
Answers
C.
The deployment project experienced significant overruns, exceeding budget projections.
D.
The new system has capacity issues, leading to slow response times for users.
Answers
D.
The new system has capacity issues, leading to slow response times for users.
Suggested answer: B

Explanation:

The most significant risk associated with a new health records system that replaces a legacy system is data not being converted correctly, resulting in inaccurate patient records. Data conversion is the process of transferring data from one format or system to another. Data conversion is a critical step in implementing a new health records system, as it ensures that the patient data are consistent, complete, accurate, and accessible in the new system. Data not being converted correctly may cause errors, discrepancies, or losses in patient records, which may have serious implications for patient safety, quality of care, legal compliance, and privacy protection. Staff not being involved in the procurement process, creating user resistance to the new system; the deployment project experiencing significant overruns, exceeding budget projections; and the new system having capacity issues, leading to slow response times for users are also risks associated with a new health records system implementation, but they are not as significant as data not being converted correctly.Reference:[ISACA CISA Review Manual 27th Edition], page 281.

asked 18/09/2024
Mark Espena
25 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first