Certified in Risk and Information Systems Control (CRISC) — Question 638

Which of the following should be PRIMARILY considered while designing information systems controls?

Answer options

• A. The IT strategic plan
• B. The existing IT environment
• C. The organizational strategic plan
• D. The present IT budget

Correct answer: C

Explanation

The organizational strategic plan is crucial as it aligns the information systems controls with the overall goals and objectives of the organization. The other options, while important, are secondary since they do not directly relate to the overarching strategy guiding the organization.