Certified Information Systems Auditor (CISA) — Question 370

Which of the following would be a result of utilizing a top-down maturity model process?

Answer options

• A. A means of comparing the effectiveness of other processes within the enterprise
• B. Identification of older, more established processes to ensure timely review
• C. Identification of processes with the most improvement opportunities
• D. A means of benchmarking the effectiveness of similar processes with peers

Correct answer: C

Explanation

The correct answer is C because a top-down maturity model focuses on identifying processes that have the most potential for improvement, helping organizations prioritize their efforts. Options A, B, and D are not specific outcomes of a top-down approach, as they relate more to general evaluation and comparison rather than targeted enhancement.