To aid management in achieving IT and business alignment, an IS auditor should recommend the
use of:

A.
control self-assessments.

B.
a business impact analysis.

C.
an IT balanced scorecard.

D.
business process reengineering.

Explanation:
An IT balanced scorecard (BSC) provides the bridge between IT objectives and business objectives
by supplementing the traditional financial evaluation with measures to evaluate customer
satisfaction, internal processes and the ability to innovate. Control self- assessment (CSA),
business impact analysis (BIA) and business process reengineering (BPR) are insufficient to align
IT with organizational objectives.