ISACA Certified Information Systems Auditor (CISA) ExamDomain 2: Governance and Management of ITEasy
A CISA is auditing an organization's IT governance framework. The CISA observes that IT steering committee meetings are consistently focused on operational issues and tactical project updates, with little discussion on long-term IT strategy or alignment with business objectives. What is the MOST significant implication of this observation?
- AThere is a lack of strategic alignment between IT initiatives and overall business goals.
- BThe IT department is highly efficient in managing daily operations and project execution.
- CThe IT steering committee is effectively monitoring project progress and resource allocation.
- DOperational staff are adequately represented in high-level IT decision-making.
Show answer & explanationAnswer & explanation
Correct answer: A. There is a lack of strategic alignment between IT initiatives and overall business goals.
An IT steering committee's primary role includes strategic planning and ensuring IT initiatives support business objectives. Focusing solely on operational issues indicates a failure to address strategic alignment, which is a critical aspect of effective IT governance.
Why the other options are wrong
- B. While operational efficiency is good, it does not address the strategic governance gap identified.
- C. Monitoring project progress is a function, but not the sole or most important function, and it doesn't address the strategic void.
- D. Representation of operational staff is not the core issue; the issue is the nature of the discussions themselves, indicating a lack of strategic focus.
IT Steering Committee Role
An IT steering committee is a group responsible for guiding IT strategy, overseeing major IT investments, and ensuring IT initiatives support business objectives.
- Provides strategic direction for IT.
- Ensures alignment of IT with business goals.
- Approves major IT projects and budgets.
Memory trick: The IT compass must point to the business stars, not just daily tasks.