CISA Systems Acquisition and Implementation

1. What should be included in a System Requirements Specification (SRS)?

Functional and non-functional requirements

Only vendor pricing details

User vacation schedules

IT staff salaries

2. Which control addresses the risk of data loss during system transition?

Data backup, archival, and recovery procedures

Increasing system processing power

Reducing vendor communication frequency

Limiting user system access

3. In acquisition governance, what ensures stakeholder alignment on project scope?

Scope management and change control processes

Vendor invoice verification

System backup schedules

User password policies

4. What is a key component of System Performance Testing during implementation?

Verifying system meets load and response time requirements

Evaluating vendor marketing materials

Documenting user complaints

Reducing software licensing costs

5. Which risk is primarily mitigated by conducting a Vendor Risk Assessment?

Vendor financial instability and capability gaps

User resistance to change

System processing delays

Budget approval delays

6. In systems acquisition, what does Business Continuity Planning ensure?

System recovery capabilities in case of failure

Vendor profit margins

User satisfaction ratings

Budget reductions

7. Which document should outline the responsibilities and accountability for system implementation?

Project Charter

Vendor invoice

User feedback form

IT helpdesk ticket

8. What is the purpose of a Post-Implementation Review (PIR)?

To plan the next system acquisition

To evaluate system performance against objectives

To terminate vendor contracts

To reduce system maintenance costs

9. In parallel implementation, what is the main advantage compared to big-bang deployment?

Faster deployment timeline

Lower overall project cost

Reduced risk through system comparison

Fewer staff training requirements

10. Which control mitigates the risk of unauthorized software in a production environment?

Software licensing and asset management controls

Increasing system memory

Reducing user access permissions

Limiting vendor communication

11. Which phase of the Systems Development Life Cycle (SDLC) includes defining business requirements and feasibility analysis?

Planning and initiation

Design and development

Testing and deployment

Operations and maintenance

12. In systems acquisition, what is the primary role of a Steering Committee?

To provide technical coding support

To oversee project governance and strategic alignment

To conduct daily system testing

To manage vendor payroll

13. Which activity ensures that system security requirements are met during implementation?

Security testing and vulnerability assessments

Increasing system processing speed

Documenting user preferences

Negotiating vendor discounts

14. What is the primary benefit of Data Migration Testing before system go-live?

To reduce vendor costs

To verify data integrity and completeness

To eliminate user training needs

To extend the project timeline

15. In contract management for system implementation, what protects the organization if the vendor fails to deliver?

Service Level Agreements (SLAs)

Vendor insurance policies

User training commitments

System documentation requirements

16. A critical control in systems acquisition is segregation of duties. Which scenario best demonstrates this principle?

One person requests, approves, and receives goods

Requestor and approver are different individuals

The vendor handles all documentation

IT staff manage all procurement decisions

17. Which of the following is a key objective of User Acceptance Testing (UAT)?

To verify system meets business requirements

To identify all vendor bugs

To reduce implementation costs

To accelerate deployment timeline

18. What does Configuration Management in systems acquisition help to maintain?

Baseline integrity of system components

Vendor invoice accuracy

User training schedules

Budget allocation percentages

19. In systems implementation, which control ensures that only authorized changes are deployed to production?

Change management controls

User access controls

Data validation controls

System backup controls

20. What is the primary purpose of a Request for Proposal (RFP) in vendor selection?

To establish vendor payment terms

To solicit competitive bids from qualified vendors

To terminate existing vendor contracts

To document vendor performance metrics

CISA Systems Acquisition and Implementation Quiz