Certified Information Systems Auditor (CISA) — Question 1255

Which of the following is MOST critical for the effective implementation of IT governance?

Answer options

• A. Supportive corporate culture
• B. Strong risk management practices
• C. Documented policies
• D. Internal auditor commitment

Correct answer: A

Explanation

A supportive corporate culture is essential for the effective implementation of IT governance as it fosters collaboration and alignment with organizational goals. While strong risk management practices, documented policies, and internal auditor commitment are also important, they are not as critical as having a culture that supports governance initiatives.