Exam CISA topic 1 question 884 discussion

C. the development function follows a robust process Maturity models, such as the Capability Maturity Model Integration (CMMI), are designed to assess the maturity and effectiveness of processes within an organization, including those related to software development. Evaluating a development project against a maturity model helps determine whether the development function is following a robust and well-defined process, which is a critical aspect of ensuring the success of the project. While the other options (A, B, and D) can also be important factors in evaluating development projects, they are not the primary focus of a maturity model assessment. Effective security requirements (A) may be assessed separately through security audits. The efficiency of development processes (B) can be evaluated, but it's not the primary goal of a maturity model assessment. Whether a development project is likely to achieve its objectives (D) depends on various factors, including project management, but is not the primary focus of a maturity model evaluation.

D. the development project is likely to achieve its objectives