When reviewing an organizations strategic IT plan an IS auditor should expect to find:

A. an assessment of the fit of the organizations application portfolio with business objectives.

B. actions to reduce hardware procurement cost.

C. a listing of approved suppliers of IT contract resources.

D. a description of the technical architecture for the organizations network perimeter security.

Explanation:

An assessment of how well an organizations application portfolio supports the organizations business objectives is a key component of the overall IT strategic planning process. This drives the demand side of IT planning and should convert into a set of strategic IT intentions. Further assessment can then be made of how well the overall IT organization, encompassing applications, infrastructure, services, management processes, etc., can support the business objectives. Operational efficiency initiatives belong to tactical planning, not strategic planning. The purpose of an IT strategic plan is to set out how IT will be used to achieve or support an organizations business objectives. A listing of approved suppliers of IT contract resources is a tactical rather than a strategic concern. An IT strategic plan would not normally include detail ofa specific technical architecture.