Certified Information Systems Auditor (CISA) — Question 23

The implementation of an IT governance framework requires that the board of directors of an organization:

Answer options

• A. approve the IT strategy.
• B. be informed of all IT initiatives.
• C. have an IT strategy committee.
• D. address technical IT issues.

Correct answer: A

Explanation

The correct answer is A because the board's approval of the IT strategy is crucial for aligning IT initiatives with business goals. Options B, C, and D are not mandatory for governance framework implementation; while they may be beneficial, they do not directly contribute to the establishment of a governance framework.