ExamGecko
Question list
Search
Search

Related questions











Question 687 - CISA discussion

Report
Export

An organization considering the outsourcing of a business application should FIRST:

A.
define service level requirements.
Answers
A.
define service level requirements.
B.
perform a vulnerability assessment.
Answers
B.
perform a vulnerability assessment.
C.
conduct a cost-benefit analysis.
Answers
C.
conduct a cost-benefit analysis.
D.
issue a request for proposal (RFP).
Answers
D.
issue a request for proposal (RFP).
Suggested answer: C

Explanation:

An organization considering the outsourcing of a business application should first conduct a cost-benefit analysis to evaluate the feasibility, viability and desirability of the outsourcing decision. A cost-benefit analysis should compare the costs and benefits of outsourcing versus keeping the application in-house, taking into account factors such as financial, operational, strategic, legal, regulatory, security and quality aspects. A cost-benefit analysis should also identify the risks and opportunities associated with outsourcing, and provide a basis for defining the service level requirements, performing a vulnerability assessment, and issuing a request for proposal (RFP) in the subsequent stages of the outsourcing process.Reference:Info Technology & Systems Resources | COBIT, Risk, Governance ... - ISACA,CISA Certification | Certified Information Systems Auditor | ISACA

asked 18/09/2024
Roman Roman
35 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first