When reviewing an organization’s strategic IT plan an IS auditor should expect to find:

A.
an assessment of the fit of the organization’s application portfolio with business objectives.

B.
actions to reduce hardware procurement cost.

C.
a listing of approved suppliers of IT contract resources.

D.
a description of the technical architecture for the organization’s network perimeter security.

Explanation:
An assessment of how well an organization’s application portfolio supports the organization’s business
objectives is a key component of the overall IT strategic planning process. This drives the demand side of IT
planning and should convert into a set of strategic IT intentions. Further assessment can then be made of how
well the overall IT organization, encompassing applications, infrastructure, services, management processes,
etc., can support the business objectives. Operational efficiency initiatives belong to tactical planning, not
strategic planning. The purpose of an IT strategic plan is to set out how IT will be used to achieve or support an
organization’s business objectives. A listing of approved suppliers of IT contract resources is a tactical rather
than a strategic concern. An IT strategic plan would not normally include detail ofa specific technical
architecture.