nerdexam
Isaca

CISA · Question #12

An IT governance body wants to determine whether IT service delivery is based on consistently effective processes. Which of the following is the BEST approach?

The correct answer is A. Develop a maturity model.. To determine if IT service delivery processes are consistently effective, developing a maturity model is the best approach. It provides a structured framework to assess and improve process sophistication and consistency over time.

Submitted by rachelw· Apr 18, 2026Governance and Management of IT

Question

An IT governance body wants to determine whether IT service delivery is based on consistently effective processes. Which of the following is the BEST approach?

Options

  • ADevelop a maturity model.
  • BEvaluate key performance indicators (KPIs).
  • CConduct a gap analysis.
  • DImplement a control self-assessment (CSA).

How the community answered

(40 responses)
  • A
    73% (29)
  • B
    18% (7)
  • C
    8% (3)
  • D
    3% (1)

Why each option

To determine if IT service delivery processes are consistently effective, developing a maturity model is the best approach. It provides a structured framework to assess and improve process sophistication and consistency over time.

ADevelop a maturity model.Correct

A maturity model provides a structured framework to evaluate the current state of processes, identify strengths and weaknesses, and define steps to achieve higher levels of process sophistication and consistency. By applying a maturity model, an IT governance body can systematically determine if IT service delivery processes are consistently effective and identify pathways for improvement towards a desired mature state.

BEvaluate key performance indicators (KPIs).

Evaluating KPIs measures process outcomes and performance, but does not provide a holistic assessment of the underlying process consistency and effectiveness as comprehensively as a maturity model.

CConduct a gap analysis.

A gap analysis identifies differences between a current and desired state but lacks the structured, staged approach of a maturity model for assessing overall process effectiveness and consistency.

DImplement a control self-assessment (CSA).

Control self-assessment (CSA) focuses on the effectiveness of specific controls within processes, not the overall maturity or consistent effectiveness of the IT service delivery processes themselves.

Concept tested: Assessing IT process maturity and effectiveness

Topics

#IT Governance#Process Maturity#Service Delivery Effectiveness#Maturity Models

Community Discussion

No community discussion yet for this question.

Full CISA Practice