To assist an organization in planning for IT investments, an IS auditor should recommend the use
of:

A.
project management tools.

B.
an object-oriented architecture.

C.
tactical planning.

D.
enterprise architecture (EA).

Explanation:
Enterprise architecture (EA) involves documenting the organization’s IT assets and processes in a
structured manner to facilitate understanding, management and planning for IT investments. It
involves both a current state and a representation of an optimized future state. In attempting to
complete an EA, organizations can address the problem either from a technology perspective or a
business process perspective. Project management does not consider IT investment aspects; it is
a tool to aid in delivering projects. Object-oriented architecture is a software development
methodology and does not assist in planning for IT investment, while tactical planning is relevant
only after high-level IT investment decisions have been made.