nerdexam
Isaca

CISA · Question #242

Which of the following should be the MOST important consideration when conducting a review of IT portfolio management?

The correct answer is D. Controls to minimize risk and maximize value for the IT portfolio. The most important consideration when reviewing IT portfolio management is to ensure controls minimize risk and maximize the value derived from IT investments, aligning with business objectives.

Submitted by stefanr· Apr 18, 2026Governance and Management of IT

Question

Which of the following should be the MOST important consideration when conducting a review of IT portfolio management?

Options

  • AAdherence to best practice and industry approved methodologies
  • BFrequency of meetings where the business discusses the IT portfolio
  • CAssignment of responsibility for each project to an IT team member
  • DControls to minimize risk and maximize value for the IT portfolio

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    12% (4)
  • D
    79% (27)

Why each option

The most important consideration when reviewing IT portfolio management is to ensure controls minimize risk and maximize the value derived from IT investments, aligning with business objectives.

AAdherence to best practice and industry approved methodologies

While adherence to best practices is important, it is a means to an end, not the ultimate goal of maximizing value and minimizing risk for the IT portfolio.

BFrequency of meetings where the business discusses the IT portfolio

The frequency of meetings is an operational detail and does not directly address the core objective of managing risk and value within the IT portfolio.

CAssignment of responsibility for each project to an IT team member

Assigning responsibility is a good project management practice but represents only one aspect of risk management and does not encompass the broader objective of maximizing portfolio value.

DControls to minimize risk and maximize value for the IT portfolioCorrect

Effective IT portfolio management aims to align IT investments with business strategy, making controls that minimize risk (e.g., project failure, budget overruns) and maximize value (e.g., ROI, strategic impact) the primary focus. This ensures that the IT portfolio contributes optimally to organizational goals and resource utilization.

Concept tested: IT portfolio management objectives and review

Source: https://learn.microsoft.com/en-us/training/modules/govern-cloud-environment-manage-costs/2-business-outcomes

Topics

#IT Portfolio Management#Risk Management#Value Realization#IT Governance

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CISA Practice