ISACA Certified Information Systems Auditor (CISA) ExamDomain 2: Governance and Management of ITEasy

A CISA is reviewing an organization's IT governance structure. The CISA notes that the IT department operates largely in isolation, with minimal interaction with business unit managers regarding IT project prioritization and resource allocation. Which of the following is the MOST likely consequence of this operational model?

  1. AReduced IT budget due to a lack of business sponsorship.
  2. BFaster deployment of IT projects due to streamlined decision-making.
  3. CIncreased IT operational efficiency due to reduced interference.
  4. DDevelopment of IT solutions that do not adequately meet business needs.
Show answer & explanation

Correct answer: D. Development of IT solutions that do not adequately meet business needs.

When IT operates in isolation from business units, there's a high risk that IT projects and resource allocation will not align with the actual needs and priorities of the business, leading to solutions that are ineffective or irrelevant.

Why the other options are wrong

  • A. While a lack of sponsorship can affect budgets, the more direct and fundamental consequence of isolated IT is building irrelevant solutions.
  • B. Faster deployment is possible, but it risks deploying the wrong solutions, ultimately harming the business.
  • C. While interference might be reduced, the efficiency gained would be offset by a lack of business relevance.

IT-Business Strategic Alignment

IT-Business Strategic Alignment ensures that IT strategies, projects, and investments are consistent with and support the organization's overall business objectives and priorities.

  • Requires strong communication channels.
  • Involves joint decision-making.
  • Measures IT value in business terms.

Memory trick: Align IT and Business to 'HIT' the target: Harmony, Integration, Target-focused.

More Domain 2: Governance and Management of IT questions