Section: Volume C
Explanation:
While defining requirements, there is need to define three requirements of the project- Business requirement, Functional requirement, and Technical requirement Functional requirements and use case models describe how users will interact with a system. Therefore here in this stem you are defining the functional requirement of the project.
Incorrect Answers:
A: Technical requirements and design specifications and coding specifications describe how the system will interact, conditions under which the system will operate and the information criteria the system should meet.
B: Business requirement, Functional requirement, and Technical requirement come under project requirement.
In this stem it is particular defining the functional requirement, hence this is not the best answer.
D: Business requirements contain descriptions of what a system should do.

The result of a control working as desired, but having an annual cost of maintenance that exceeds the expected annual loss exposure, is that the control is inefficient, as it implies that the control is not cost-effective or optimal, and may require a review or adjustment. The other options are not the correct results, as they do not reflect the performance or adequacy of the control, but rather the maturity, effectiveness, or optimization of the control, respectively. References = CRISC Review Manual, 7th Edition, page 154.

Section: Volume C
Explanation:
For effective post-implementation review the business measurements up front is established during the project.
Incorrect Answers:
B: Executing sufficient number of business cycles in the new system is done after the completion of the project.
C, D: Identifying the information to be reviewed and information collected during each stage of project is done in pre-project phase and not during project for effective post-implementation review.

Scenario analysis is a technique that helps to identify significant events that could impact an organization by creating and exploring plausible alternative futures. Scenario analysis can help anticipate and prepare for potential changes, opportunities, or threats in the internal or external environment, such as technological, economic, social, political, legal, or environmental factors. Scenario analysis can also help evaluate the impact and likelihood of different risk scenarios, and test the effectiveness and robustness of various risk response strategies. Scenario analysis can provide a comprehensive and holistic view of risks and their interrelationships, and support the decision making and planning process for risk management. References = Risk and Information Systems Control Study Manual, Chapter 1: IT Risk Identification, Section 1.4: IT Risk Scenarios, p. 49-50.