When reviewing an active project, an IS auditor observed that, because of a reduction in anticipated
benefits and increased costs, the business case was no longer valid. The IS auditor should
recommend that the:
project be discontinued.
business case be updated and possible corrective actions be identified.
project be returned to the project sponsor for reapproval.
project be completed and the business case be updated later.
An IS auditor should not recommend discontinuing or completing the project before reviewing an
updated business case. The IS auditor should recommend that the business case be kept current
throughout the project since it is a key input to decisions made throughout the life of any project.