Certified in Risk and Information Systems Control (CRISC) — Question 1437

Which of the following will BEST mitigate the risk associated with IT and business misalignment?

Answer options

• A. Introducing an established framework for IT architecture
• B. Establishing business key performance indicators (KPIs)
• C. Involving the business process owner in IT strategy
• D. Establishing key risk indicators (KRIs)

Correct answer: C

Explanation

Involving the business process owner in IT strategy ensures that IT initiatives align closely with business goals, reducing the risk of misalignment. While introducing frameworks, establishing KPIs, and KRIs are helpful, they do not directly involve the business in the IT decision-making process as effectively as option C.