CISA · Question #14
Following a merger, a review of an international organization determines the IT steering committee's decisions do not extend to regional offices as required in the consolidated IT operating model. Whi
The correct answer is C. Update the IT steering committee's formal charter.. If an IT steering committee's decisions do not extend to regional offices as required, the IS auditor's best recommendation is to update its formal charter. This clarifies and expands the committee's scope and authority to align with the consolidated IT operating model.
Question
Following a merger, a review of an international organization determines the IT steering committee’s decisions do not extend to regional offices as required in the consolidated IT operating model. Which of the following is the IS auditor's BEST recommendation?
Options
- ACreate regional centers of excellence.
- BEngage an IT governance consultant.
- CUpdate the IT steering committee's formal charter.
- DCreate regional IT steering committees.
How the community answered
(25 responses)- A8% (2)
- B4% (1)
- C72% (18)
- D16% (4)
Why each option
If an IT steering committee's decisions do not extend to regional offices as required, the IS auditor's best recommendation is to update its formal charter. This clarifies and expands the committee's scope and authority to align with the consolidated IT operating model.
Creating regional centers of excellence focuses on specialized knowledge and innovation, which is not a direct solution to the issue of a central committee's decisions lacking organizational reach.
While an IT governance consultant could be engaged for broader issues, updating the charter is a more specific and fundamental recommendation for the identified problem of limited authority scope.
The formal charter of an IT steering committee explicitly defines its purpose, responsibilities, and scope of authority. If decisions are not reaching regional offices, updating the charter directly addresses this by formally expanding the committee's mandate to include these offices, ensuring its authority and decisions are recognized and implemented across the entire organization as per the consolidated IT operating model.
Creating regional IT steering committees could fragment IT governance and undermine the consolidated operating model, rather than ensuring the central committee's decisions extend effectively.
Concept tested: IT governance structure and authority
Topics
Community Discussion
No community discussion yet for this question.