The best point in time to conduct a post-implementation review is after a full processing cycle. A post-implementation review is conducted to verify that the implemented system meets the original requirements and that it is operating as intended. Therefore, it is important to wait until the system has gone through a full processing cycle, so that any errors or issues can be identified and addressed. This allows the organization to make sure that the system is stable and reliable before it is put into production.

Configuration Management Database (CMDB) is a repository of information about an organization's IT infrastructure, including hardware and software components, the relationships between them, and the people and processes associated with them. By reviewing the CMDB, an IS auditor can gain insight into the organization's IT systems and applications and evaluate their effectiveness in supporting the organization's business processes. Additionally, the CMDB can be used to identify any potential security vulnerabilities or areas of improvement.