Home › MCQs › CISA › Question #6822
Back to Questions
CISA QUESTION #6822
Question 1
An IS auditor finds that a company's COBIT implementation focuses exclusively on IT processes while ignoring business alignment and strategic goals. What is the MOST critical deficiency?
  • Incomplete COBIT coverage
  • Missing the fundamental purpose of COBIT as a governance framework linking IT to business objectives✔️
  • Need for additional IT processes
  • Insufficient documentation
Correct Answer Explanation
COBIT is fundamentally a governance framework designed to align IT with business objectives and ensure IT delivers value. Focusing only on IT processes without business alignment defeats COBIT's core purpose. The framework exists to bridge IT and business strategy, not simply to catalog IT activities.