The most effective way for an organization to help ensure agreed-upon action plans from an IS audit will be implemented is to ensure ownership is assigned. This means that the management of the audited area should accept responsibility for implementing the action plans and report on their progress and completion to the audit committee or senior management. This will ensure accountability, commitment, and follow-up for the audit recommendations34. References: 3: CISA ReviewManual (Digital Version), Chapter 1: The Process of Auditing Information Systems, Section 1.6: Reporting, page 41 4: CISA Online Review Course, Module 1:
The Process of Auditing Information Systems, Lesson 1.6: Reporting

After migrating infrastructure to the cloud, it's imperative to test the disaster recovery plan (DRP) to ensure its effectiveness in the new environment. Without evidence of DRP testing post-migration, the organization cannot be certain that it can recover and continue operations during a disaster. While updating the DRP and configuring redundancy are essential steps, their effectiveness can only be validated through rigorous testing.
Retaining previous infrastructure is less relevant if the cloud environment is properly configured and tested for disaster recovery.
References:
* ISACA CISA Review Manual, 28th Edition, Chapter 4: Information Systems Operations and Business Resilience.

Astress testevaluates system performance under extreme conditions, such as high user loads, to determine how the system behaves under peak traffic or resource exhaustion.
Stress Testing (Correct Answer - A)
Identifies performance bottlenecks in software applications.
Helps ensure the ERP system can handle expected workloads.
Example:Simulating thousands of concurrent users accessing the ERP system to test response times and server load capacity.
Parallel Testing (Incorrect - B)
Compares a new system with an old one but does not test system performance under load.
Regression Testing (Incorrect - C)
Tests whether recent code changes have affected existing functionality but does not focus on performance.
Interface Testing (Incorrect - D)
Checks interactions between system components but does not measure performance.
References:
ISACA CISA Review Manual
COBIT 2019: Performance and Capacity Planning
NIST 800-37 (Risk Management Framework)