Until when should an IS business case remain available for review?
The business case for an information system investment should be available for review until the:
Community Votes
75% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
This question tests the lifecycle endpoint for preserving a business case; the common trap is choosing retirement or end-of-life instead of the benefits-realization phase where post-implementation review occurs.
A business case for an information system investment must be maintained as a reviewable document through the investment lifecycle. This page explains why the correct CISA answer is D, benefits fully realized, with expert analysis and community context.
Choosing A (information system investment is retired) because retirement appears to be the final lifecycle event; this is wrong because the business case must still be available earlier, through the period when benefits are assessed and realized.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Option D is correct because the business case is the baseline for measuring whether an information system investment delivers its intended benefits. Organizations need the original cost, schedule, and benefit assumptions to perform a meaningful post-implementation review, which can only happen once benefits have been fully realized. ISACA guidance treats benefits realization as the point at which the business case has fulfilled its purpose and can be archived.Why the Other Options Are Wrong
Option A (retirement) and C (end of life) describe later decommissioning events that occur long after the business case has served its purpose; retaining it that long is not the standard control objective. Option B (formal investment decision approval) is too early, because the business case is needed after approval to guide implementation and to evaluate whether predicted benefits occur. Only D aligns with the need to review the business case against actual benefits realized.Community Comment Notes
A commenter noted that both A and D can appear valid depending on organizational context, but the official lifecycle approach points to benefits realization as the decisive review milestone. RS66 selected A, viewing retirement as the final review point; however, retirement occurs only after benefits have already been realized and evaluated. Swallows supported D by explaining that the business case allows the organization to assess effectiveness throughout the lifecycle, including post-implementation review.Exam Strategy
Look for the wording 'available for review' and connect it to post-implementation review and benefits realization. When a lifecycle question offers both a very early stage and a very late stage, choose the point that satisfies the document's review purpose, not the absolute end of the asset's existence.
Frequently Asked Questions
Why is A (system retired) not the best answer if it happens later?
Retirement happens after benefits have already been realized and reviewed, so keeping the business case until retirement is unnecessary and not the intended control point.
When during the investment lifecycle is the business case most frequently reviewed?
It is reviewed at the formal investment decision, at key project stages, and especially during post-implementation review after benefits have been fully realized.
Related Analysis
Practice All CISA Questions
Access 400 questions with complete answers and detailed explanations.
View Full CISA Practice Test →