Certified Information Systems Auditor (CISA) — Question 322

A review of an organization's IT portfolio revealed several applications that are not in use. The BEST way to prevent this situation from recurring would be to implement:

Answer options

• A. an information asset acquisition policy.
• B. business case development procedures.
• C. a formal request for proposal (RFP) process.
• D. asset life cycle management.

Correct answer: D

Explanation

Implementing asset life cycle management ensures that all applications are regularly reviewed and assessed throughout their lifespan, helping to identify and eliminate unused applications proactively. The other options focus on acquisition and proposal processes but do not address the ongoing management and evaluation of existing applications.