Exam CISA topic 1 question 1073 discussion

data security is a greater priority than IT support

A is like saying you will have a system with weak security controls. C is like having a system that doesn't work at all. It is ok to have a system with weak controls, you may fix later of place compensating controls, but it is not ok to buy a system that doesn't work. C is the main concern.

The greatest risk is that system inventory information becomes inaccurate and the system is not supported by the IT department.

When business units procure IT assets without IT involvement is that data security requirements may not be considered. Without IT involvement, there is a higher likelihood that security standards, policies, and measures may not be adequately addressed during the procurement process, potentially leading to vulnerabilities and data security risks.

A. Data security requirements are not considered. The primary risk when business units procure IT assets without IT involvement is that data security requirements may not be adequately considered. This can lead to vulnerabilities and potential breaches, which can have serious consequences for the organization. While the other options (B, C, and D) are also potential risks associated with independent procurement of IT assets, data security is typically the most critical concern.

A ic correect

A. Data security requirements are not considered.