Certified Information Systems Auditor (CISA) — Question 640

Which of the following metrics would BEST measure the agility of an organization's IT function?

Answer options

• A. Average number of learning and training hours per IT staff member
• B. Percentage of staff with sufficient IT-related skills for the competency required of their roles
• C. Average time to turn strategic IT objectives into an agreed upon and approved initiative
• D. Frequency of security assessments against the most recent standards and guidelines

Correct answer: C

Explanation

The correct answer, C, focuses on the speed at which strategic IT goals are transformed into actionable initiatives, reflecting organizational agility. Option A measures training hours, which doesn't directly relate to agility, while B assesses skill sufficiency, which is important but not a direct measure of agility. Option D concerns security assessments, which, though vital, do not gauge the responsiveness or adaptability of the IT function.