Question

During a governance review, an IS auditor finds that decisions about which major IT projects receive funding are made solely by the IT director, with no formal cross-functional review. Business unit leaders complain that IT investments do not reflect enterprise priorities. Which recommendation best addresses this governance weakness?

Accepted Answer

Establish an IT steering committee with business and IT representation to prioritize and approve major IT investments

Answer

Require the IT director to document a business case for each project before funding

Answer

Have the internal audit function approve all IT project funding decisions

Answer

Delegate IT investment decisions to the enterprise project management office (PMO)