Certified Information Systems Auditor (CISA) — Question 347
An organization considers implementing a system that uses a technology that is not in line with the organization's IT strategy. Which of the following is the BEST justification for deviating from the IT strategy?
Answer options
- A. The system makes use of state-of-the-art technology.
- B. The system has a reduced cost of ownership.
- C. The organization has staff familiar with the technology.
- D. The business benefits are achieved even with extra costs.
Correct answer: D
Explanation
The correct answer is D because achieving business benefits, even if there are extra costs, justifies the deviation from the IT strategy. The other options focus on technology, cost savings, or staff familiarity, which do not provide as strong a rationale for overriding the established IT strategy.