To aid management in achieving IT and business alignment, an IS auditor should recommend the use of:

A. control self-assessments.

B. a business impact analysis.

C. an IT balanced scorecard.

D. business process reengineering.

Explanation:

An IT balanced scorecard (BSC) provides the bridge between IT objectives and business objectives by supplementing the traditional financial evaluation with measures to evaluate customer satisfaction, internal processes and the ability to innovate. Control self- assessment (CSA), business impact analysis (BIA) and business process reengineering (BPR) are insufficient to align IT with organizational objectives.