Section: Protection of Information Assets
Explanation:
Planning for implementation should begin well in advance of the actual implementation date. A formal
implementation plan should be constructed in the design phase and revised as the development
progresses.

Section: Protection of Information Assets
Explanation:
Whenever proprietary application software is purchased, the contract should provide for a source code
agreement. This will ensure that the purchasing company will have the opportunity to modify the software
should the vendor cease to be in business. Having a backup server with current data and staff training is
critical but not as critical as ensuring the availability of the source code.

Explanation/Reference:
Obtaining user approval of program changes is very effective for controlling application changes and maintenance.

The best environment for copying data and transforming it into a compatible data warehouse format is the staging environment. The staging environment is a temporary area where data from various sources are extracted, transformed, and loaded (ETL) before being moved to the data warehouse. The staging environment allows for data cleansing, validation, integration, and standardization without affecting the source or target systems. The testing environment is not suitable for copying data and transforming it into a compatible data warehouse format, as it is used for verifying and validating the functionality and performance of applications or systems. The replication environment is not suitable for copying data and transforming it into a compatible data warehouse format, as it is used for creating identical copies of data or systems for backup or recovery purposes. The development environment is not suitable for copying data and transforming it into a compatible data warehouse format, as it is used for creating or modifying applications or systems. References:
* CISA Review Manual, 27th Edition, pages 475-4761
* CISA Review Questions, Answers & Explanations Database, Question ID: 2642