CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following should be considered primarily when designing information-systems controls?

A The IT strategic plan
B The existing IT environment
C The organizational strategic plan
D The present IT budget

Explanation

Information-systems controls should be driven primarily by the organization’s strategic plan because control objectives need to support enterprise goals, business processes, risk management, and governance. IT plans, the current environment, and budget inform implementation, but do not establish the primary business purpose of the controls.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ690

Community Discussion