Exam CISA All QuestionsBrowse all questions from this exam
Question 1209

Which of the following BEST enables an organization to balance value delivery and risk management?

    Correct Answer: A

    Utilizing an IT governance framework BEST enables an organization to balance value delivery and risk management. This framework provides structured guidelines and processes to ensure that IT investments are aligned with business objectives, risks are properly managed, and value delivery is maximized. While other processes like risk assessments and gap assessments are important, an IT governance framework holistically integrates these activities within a unified strategy.

Discussion
SwallowsOption: C

An IT governance framework (option A) is important, but without a specific risk assessment, it is difficult to show specifically how to achieve a balance. An IT governance framework provides guidelines and processes to support risk management, but its effectiveness is based on a risk assessment. Therefore, the most effective way for an organization to balance value delivery and risk management is to first conduct a risk assessment and then develop a strategy based on the results.