Certified Information Systems Auditor (CISA) — Question 1241

What should be an IS auditor's MOST important consideration when assessing whether an organization's IT project portfolio is appropriately prioritized?

Answer options

• A. Cost-benefit analysis results
• B. The organization's business plan
• C. Business impact analysis (BIA)
• D. The organization's IT budget

Correct answer: B

Explanation

The organization's business plan is crucial as it aligns IT projects with strategic objectives and priorities. While cost-benefit analysis, BIA, and the IT budget are important, they serve as supporting tools rather than the primary framework for prioritization.