Certified Information Systems Auditor (CISA) — Question 1152

Which of the following is the GREATEST risk of project dashboards being set without sufficiently defined criteria?

Answer options

• A. Lack of alignment of project status reports
• B. Inadequate decision-making and prioritization.
• C. Lack of project portfolio status oversight.
• D. Adverse findings from internal and external auditors.

Correct answer: B

Explanation

The greatest risk (B) stems from the lack of clear criteria, which can lead to poor decision-making and prioritization, as stakeholders may not have reliable data to make informed choices. The other options, while concerning, focus on reporting consistency, oversight, and audit outcomes, which are important but secondary to the fundamental issue of decision-making effectiveness.