StudyToCert

All certifications / CISA / Lessons

ISACA Certified Information Systems Auditor (CISA) 2024 job practice · Domain 3: Information systems acquisition, development and implementation

Business case and feasibility analysis

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

Before an organization spends money on a new system, it should understand why. The business case documents the problem or opportunity, the options considered, the costs, benefits and risks of each, and the recommended solution with its expected return. It is the reference point for deciding whether to start, continue, change or stop a project, and it names the sponsor who is accountable for delivering the benefits. For an auditor, a missing or weak business case means there is no objective yardstick for judging the project.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study CISA for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the CISA study plan