Certified Information Systems Auditor (CISA) — Question 591

Which of the following is the BEST way to determine if IT is delivering value to the business?

Answer options

• A. Analyze downtime frequency and duration.
• B. Interview key IT managers and service providers.
• C. Perform control self-assessments (CSAs).
• D. Review IT service level agreement (SLA) results.

Correct answer: D

Explanation

The correct answer is D because reviewing IT service level agreement (SLA) results provides direct insights into IT performance and its alignment with business objectives. Options A, B, and C may offer useful information, but they do not directly measure the value delivered by IT in the context of agreed-upon service levels.