Exam CISA topic 1 question 1384 discussion

It is very important that information security requirements are integrated into the EA program. EA integrates strategies and processes across the organization, which should include rules and standards regarding information security. IS auditors must evaluate whether these requirements are properly considered and implemented. In contrast, the observation in option C, "IT application owners are solely responsible for architecture approval," is about the management and ownership of individual applications and has less direct impact on the security and integrity of the overall EA program.