To assist an organization in planning for IT investments, an IS auditor should recommend the use of:

A.
project management tools.

B.
an object-oriented architecture.

C.
tactical planning.

D.
enterprise architecture (EA).

Explanation:
Enterprise architecture (EA) involves documenting the organization’s IT assets and processes in a structured
manner to facilitate understanding, management and planning for IT investments. It involves both a current
state and a representation of an optimized future state. In attempting to complete an EA, organizations can
address the problem either from a technology perspective or a business process perspective. Project
management does not consider IT investment aspects; it is a tool to aid in delivering projects. Object-orientedarchitecture is a software development methodology and does not assist in planning for IT investment, while
tactical planning is relevant only after high-level IT investment decisions have been made.