Certified in Risk and Information Systems Control (CRISC) — Question 1100

Which of the following will BEST help to ensure new IT policies address the enterprise’s requirements?

Answer options

• A. Involve business owners in the policy development process.
• B. Provide policy owners with greater enforcement authority.
• C. Require business users to sign acknowledgment of the policies.
• D. Involve IT leadership in the policy development process.

Correct answer: A

Explanation

Involving business owners in the policy development process ensures that the policies align with the actual needs and requirements of the organization, thus making them more effective. The other options, while beneficial in different contexts, do not directly contribute to tailoring the policies to enterprise requirements.