Certified Information Systems Auditor (CISA) — Question 294

When implementing a new IT maturity model, which of the following should occur FIRST?

Answer options

• A. Determine the model elements to be evaluated.
• B. Benchmark with industry peers.
• C. Define the target IT maturity level.
• D. Develop performance metrics.

Correct answer: A

Explanation

The first step in implementing an IT maturity model is to determine the model elements to be evaluated, as this establishes the foundation for all subsequent actions. Without identifying what aspects will be assessed, it is not possible to effectively benchmark, define target levels, or develop metrics. The other options are dependent on the initial evaluation elements being set.