ISACA Certified Information Systems Auditor (CISA) ExamDomain 2: Governance and Management of ITEasy

A CISA is auditing an organization's IT governance framework. The CISA observes that the IT department consistently prioritizes technical innovation projects over initiatives directly supporting the organization's strategic business objectives, despite a formal IT strategy document outlining business alignment. Which of the following is the MOST significant finding?

  1. AInsufficient technical skills within the IT department.
  2. BAbsence of a formal IT strategy document.
  3. CLack of adequate funding for IT innovation projects.
  4. DIneffective communication channels between IT and business units.
Show answer & explanation

Correct answer: D. Ineffective communication channels between IT and business units.

The core issue is a misalignment between IT's actions and the documented business strategy, which points to a breakdown in communication and integration between IT and business units. While a formal strategy exists, it's not being executed, indicating a gap in understanding or prioritization. Effective communication is crucial for ensuring IT projects support business goals.

Why the other options are wrong

  • A. Technical skills are important, but the problem described is about strategic prioritization and alignment, not the ability to execute specific technical tasks.
  • B. The scenario explicitly states a formal IT strategy document exists, so this option is incorrect.
  • C. Funding issues might exist, but the primary problem is the prioritization despite a strategy, not necessarily a lack of funds for innovation itself.

IT-Business Strategic Alignment

The congruence between an organization's IT strategy and its overall business strategy, ensuring that IT investments and priorities directly support and enable the achievement of business objectives.

  • Ensures IT resources are used effectively.
  • Critical for organizational success and competitive advantage.
  • Requires strong communication and collaboration between IT and business.

Memory trick: Aligning IT to Business: IT Binds Strategies.

More Domain 2: Governance and Management of IT questions