nerdexam
Isaca

CISA · Question #14

Following a merger, a review of an international organization determines the IT steering committee's decisions do not extend to regional offices as required in the consolidated IT operating model. Whi

The correct answer is C. Update the IT steering committee's formal charter.. If an IT steering committee's decisions do not extend to regional offices as required, the IS auditor's best recommendation is to update its formal charter. This clarifies and expands the committee's scope and authority to align with the consolidated IT operating model.

Submitted by daniela_cl· Apr 18, 2026Governance and Management of IT

Question

Following a merger, a review of an international organization determines the IT steering committee’s decisions do not extend to regional offices as required in the consolidated IT operating model. Which of the following is the IS auditor's BEST recommendation?

Options

  • ACreate regional centers of excellence.
  • BEngage an IT governance consultant.
  • CUpdate the IT steering committee's formal charter.
  • DCreate regional IT steering committees.

How the community answered

(25 responses)
  • A
    8% (2)
  • B
    4% (1)
  • C
    72% (18)
  • D
    16% (4)

Why each option

If an IT steering committee's decisions do not extend to regional offices as required, the IS auditor's best recommendation is to update its formal charter. This clarifies and expands the committee's scope and authority to align with the consolidated IT operating model.

ACreate regional centers of excellence.

Creating regional centers of excellence focuses on specialized knowledge and innovation, which is not a direct solution to the issue of a central committee's decisions lacking organizational reach.

BEngage an IT governance consultant.

While an IT governance consultant could be engaged for broader issues, updating the charter is a more specific and fundamental recommendation for the identified problem of limited authority scope.

CUpdate the IT steering committee's formal charter.Correct

The formal charter of an IT steering committee explicitly defines its purpose, responsibilities, and scope of authority. If decisions are not reaching regional offices, updating the charter directly addresses this by formally expanding the committee's mandate to include these offices, ensuring its authority and decisions are recognized and implemented across the entire organization as per the consolidated IT operating model.

DCreate regional IT steering committees.

Creating regional IT steering committees could fragment IT governance and undermine the consolidated operating model, rather than ensuring the central committee's decisions extend effectively.

Concept tested: IT governance structure and authority

Topics

#IT Governance#IT Steering Committee#Committee Charter#Organizational Authority

Community Discussion

No community discussion yet for this question.

Full CISA Practice