Certified Information Systems Auditor (CISA) — Question 95

An organization has shifted from a bottom-up approach to a top-down approach in the development of IT policies. This should result in:

Answer options

• A. greater consistency across the organization
• B. greater adherence to best practices
• C. a more comprehensive risk assessment plan
• D. a synthesis of existing operational policies

Correct answer: A

Explanation

The correct answer is A because a top-down approach typically leads to uniformity in policy implementation across all levels of the organization. Options B, C, and D may also improve, but they are not guaranteed outcomes of shifting to a top-down policy approach.