nerdexam
Isaca

CISA · Question #461

When reviewing an organization's enterprise architecture (EA), which of the following is an IS auditor MOST likely to find within the EA documentation?

The correct answer is D. Roadmaps showing the evolution from current state to future state. Enterprise architecture documentation typically includes both the “as‑is” (current) and “to‑be” (future) models along with transition roadmaps that guide the organization’s technological and process evolution. This roadmap is a core EA artifact, whereas detailed technical standar

Submitted by haruto_sh· Apr 18, 2026Governance and Management of IT

Question

When reviewing an organization’s enterprise architecture (EA), which of the following is an IS auditor MOST likely to find within the EA documentation?

Options

  • ADetailed encryption standards
  • BProtocols used to communicate between systems
  • CContact information for key resources within the IT department
  • DRoadmaps showing the evolution from current state to future state

How the community answered

(26 responses)
  • A
    4% (1)
  • C
    8% (2)
  • D
    88% (23)

Explanation

Enterprise architecture documentation typically includes both the “as‑is” (current) and “to‑be” (future) models along with transition roadmaps that guide the organization’s technological and process evolution. This roadmap is a core EA artifact, whereas detailed technical standards, contact lists, or specific protocol details reside in more specialized documents.

Topics

#Enterprise Architecture (EA)#IT Governance#Strategic Planning#Roadmaps

Community Discussion

No community discussion yet for this question.

Full CISA Practice