Exam CISA topic 1 question 1646 discussion

Es importante realizar evaluaciones de riesgos en cada etapa del SDLC para identificar y mitigar riesgos de manera continua y eficaz, asegurando que los mecanismos de control estén bien establecidos

While conducting risk assessments at each stage of the life cycle (option B) is valuable to continuously monitor and manage risks throughout the project, addressing risks early (prior to system development) sets a strong foundation for effective risk management across all subsequent stages of the SDLC. Therefore, option A, performing a risk assessment prior to system development, is often considered the most beneficial stage in the SDLC to conduct a risk assessment.