To aid management in achieving IT and business alignment, an IS auditor should recommend the
use of:

A.
control self-assessments.

B.
a business impact analysis.

C.
an IT balanced scorecard.

D.
business process reengineering.

Explanation:

An IT balanced scorecard (BSC) provides the bridge between IT objectives and business
objectives by supplementing the traditional financial evaluation with measures to evaluate
customer satisfaction, internal processes and the ability to innovate. Control self-assessment
(CSA), business impact analysis (BIA) and business process reengineering (BPR) are insufficient
to align IT with organizational objectives.