CISA Certified Information Systems Auditor – Question1389

Which of the following is the PRIMARY objective of baselining the IT control environment?

A.
Define process and control ownership.
B. Ensure IT security strategy and policies are effective.
C. Align IT strategy with business strategy.
D. Detect control deviations.

Correct Answer: D