Certified Information Systems Auditor (CISA) — Question 504

The performance, risks, and capabilities of an IT infrastructure are BEST measured using a:

Answer options

• A. risk management review.
• B. control self-assessment (CSA).
• C. service level agreement (SLA).
• D. balanced scorecard.

Correct answer: D

Explanation

The balanced scorecard provides a comprehensive framework that measures performance from multiple perspectives, including financial, customer, internal processes, and learning and growth. Other options like risk management reviews and service level agreements focus on specific areas rather than providing an overall assessment of the IT infrastructure's performance and capabilities.