CISA Certified Information Systems Auditor – Question0753

In a decentralized organization, the selection and purchase of IS products is acceptable as long as which of the following conditions exists?

A.
The same operating system is used throughout the organization.
B. Various offices are independent and exchange data on an occasional basis.
C. Acquired items are consistent with the organization’s short- and long-term IS strategy plans.
D. Managers undertake a full cost-benefit analysis before deciding what to purchase.

Correct Answer: C