Certified Information Systems Auditor (CISA) — Question 21

When developing metrics to measure the contribution of IT to the achievement of business goals, the MOST important consideration is that the metrics:

Answer options

• A. measure the effectiveness of IT controls in the achievement of IT strategy.
• B. provide quantitative measurement of IT initiatives in relation with business targets.
• C. are expressed in terms of how IT risk impacts the achievement of business goals.
• D. are used by similar industries to measure the effect of IT on business strategy.

Correct answer: B

Explanation

The correct answer is B because providing quantitative measurements allows for clear comparisons between IT initiatives and business targets, making it easier to assess IT's contribution. Option A focuses solely on IT strategy without linking it to business goals, while C emphasizes IT risk, which is not the primary focus for measuring contributions. Option D is about industry standards rather than the specific metrics needed for business goals.