To aid management in achieving IT and business alignment, an IS auditor should recommend the use
of:

A.
control self-assessments.

B.
a business impact analysis.

C.
an IT balanced scorecard.

D.
business process reengineering.

Explanation:
An IT balanced scorecard (BSC) provides the bridge between IT objectives and business objectives by
supplementing the traditional financial evaluation with measures to evaluate customer satisfaction,
internal processes and the ability to innovate. Control self-assessment (CSA), business impact
analysis (BIA) and business process reengineering (BPR) are insufficient to align IT with
organizational objectives.