CISA Certified Information Systems Auditor – Question2727

To aid management in achieving IT and business alignment, an IS auditor should recommend the use of:

A. control self-assessments.
B. a business impact analysis.
C. an IT balanced scorecard.
D. business process reengineering.

Correct Answer: C

Explanation:

Explanation:
An IT balanced scorecard (BSC) provides the bridge between IT objectives and business objectives by supplementing the traditional financial evaluation with measures to evaluate customer satisfaction, internal processes and the ability to innovate. Control selfassessment
(CSA), business impact analysis (BIA) and business process reengineering (BPR) are insufficient to align IT with organizational objectives.