CISA · Question #647
Which of the following would be of GREATEST concern to an IS auditor reviewing an organization's enterprise architecture (EA) by examining its EA management tool?
The correct answer is D. Business process owners have not been assigned to all business systems.. Business process ownership is a fundamental governance and accountability requirement in enterprise architecture. Without assigned owners, no one is responsible for the accuracy of system information, compliance with policies, lifecycle decisions, or risk management for those sys
Question
Which of the following would be of GREATEST concern to an IS auditor reviewing an organization’s enterprise architecture (EA) by examining its EA management tool?
Options
- AProduct license contracts are not included for all business systems.
- BTechnical details are not maintained for all business systems.
- CIT data inventories have not been reviewed for all business systems.
- DBusiness process owners have not been assigned to all business systems.
How the community answered
(25 responses)- A4% (1)
- B12% (3)
- C28% (7)
- D56% (14)
Explanation
Business process ownership is a fundamental governance and accountability requirement in enterprise architecture. Without assigned owners, no one is responsible for the accuracy of system information, compliance with policies, lifecycle decisions, or risk management for those systems. This represents a systemic accountability gap. Missing license contracts (A) is an operational/legal risk but scoped. Missing technical details (B) reduces documentation quality but does not eliminate accountability. Unreviewed IT data inventories (C) is a data governance gap. The absence of ownership (D) is the most critical because it undermines all other controls - without an owner, issues with licenses, technical details, and data inventories have no one accountable to resolve them.
Topics
Community Discussion
No community discussion yet for this question.