Exam CISA Topic 9 Question 362 Discussion
Actual exam question for ISACA's CISA exam
Question #: 362
Topic #: 9
Question #: 362
Topic #: 9
Which of the following BEST supports the prioritization of new IT projects?
Suggested Answer: C Vote an answer
Section: Protection of Information Assets
Explanation:
It is most desirable to conduct an investment portfolio analysis, which will present not only a clear focus on
investment strategy, but will provide the rationale for terminating nonperforming IT projects. Internal control
self-assessment (CSA) may highlight noncompliance to the current policy, but may not necessarily be the
best source for driving the prioritization of IT projects. Like internal CSA, IS audits may provide only part of
the picture for the prioritization of IT projects.
Business risk analysis is part of the investment portfolio analysis but, by itself, is not the best method for
prioritizing new IT projects.
Explanation:
It is most desirable to conduct an investment portfolio analysis, which will present not only a clear focus on
investment strategy, but will provide the rationale for terminating nonperforming IT projects. Internal control
self-assessment (CSA) may highlight noncompliance to the current policy, but may not necessarily be the
best source for driving the prioritization of IT projects. Like internal CSA, IS audits may provide only part of
the picture for the prioritization of IT projects.
Business risk analysis is part of the investment portfolio analysis but, by itself, is not the best method for
prioritizing new IT projects.
by Coral at Feb 21, 2025, 01:09 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).