CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following should be the primary consideration when designing information systems controls?

A The IT strategic plan
B The existing IT environment
C The organizational strategic plan
D The present IT budget

Explanation

Information systems controls must align with the organization’s strategic objectives, because those objectives define the business outcomes, risks, and priorities the controls are intended to support. IT plans, the current IT environment, and budget affect control implementation, but do not establish the primary business purpose of the controls.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ543

Community Discussion