Certified Information Systems Auditor (CISA) — Question 886

An IS auditor has been asked to review an organization's IT resource management practices. Which of the following findings should be of GREATEST concern?

Answer options

• A. An existing vacancy for an IT administrator
• B. The lack of a confidentiality agreement for IT management
• C. Insufficient IT training
• D. An undocumented IT strategy

Correct answer: D

Explanation

The correct answer is D, as an undocumented IT strategy can lead to misalignment in IT goals and operations, creating significant risks for the organization. While the other options are concerning, they do not pose as immediate a threat to the overall effectiveness and direction of IT management as the absence of a documented strategy does.