Exam CISA topic 1 question 347 discussion

Of the options provided, the most appropriate answer is A, "approve the IT strategy." The board of directors has the responsibility of approving the IT strategy and ensuring that it aligns with the overall goals and objectives of the organization. This is a critical step in ensuring that IT initiatives are aligned with business objectives and that the organization's resources are effectively allocated to support these objectives.

While establishing an IT strategy committee (Option C) may be beneficial for providing specialized oversight and guidance on IT matters, the ultimate responsibility for approving the IT strategy typically lies with the board of directors. The board ensures that the IT strategy aligns with the organization's goals, risk appetite, and compliance requirements.

B is correct. IT Strategy Committee approves the IT strategy the BoD are advisors and needs to be informed of IT initiatives.

The Keyword is implantation. this is a very tricky question. I went for A too but on a second thought the Board needs to be informed by the IS Steering committee who is in charge of the implantation of IS Strategy .

and in absence an IT strategy the it gov framework cannot be implemented .. so A could be a correct answer. Anyone who has any other set of understanding may pls. guide

IT strategy should be approved first. Also 'ALL' IT initiative may not be informed.

I guess it is B. be informed of all IT initiatives. Approving is one time issue