Certified Information Systems Auditor (CISA) — Question 748

Which of the following is MOST important to confirm when evaluating an IT organization's structure?

Answer options

• A. Clear reporting and lines of authority
• B. Documented provisions for interdepartmental cross-training
• C. Comprehensive system architecture documentation
• D. Policies and procedures that define requirements for periodic job rotation

Correct answer: A

Explanation

The correct answer, A, is essential because clear reporting and lines of authority ensure accountability and effective communication within the organization. Options B, C, and D, while important, focus on specific operational practices rather than the fundamental organizational structure that supports overall effectiveness.