Determine which component of IT Governance that each question will allow the auditor to evaluate.

- A. B. C. D. E.	Is there a CIO in place, and is he or she a member of the senior management team?
- A. B. C. D. E.	Are roles and responsibilities clearly defined and communicated, and are organization leaders empowered and held accountable for results?
- A. B. C. D. E.	Does senior management have clearly defined and communicated roles and responsibilities for the IT function with respect to the organizational achievement of strategic and tactical goals?
- A. B. C. D. E.	Does the organization recognize in its strategy that the IT function is a significant contributor in enabling the achievement of goals, as well as supporting the organization on a day-to-day basis?
- A. B. C. D. E.	Does the strategic plan of the organization include how IT is required to support and enable value creation?
- A. B. C. D. E.	Is the IT organization structured effectively relative to the size and composition of the organization?
- A. B. C. D. E.	Do the board and senior management have a clear understanding of IT costs and how they contribute to the achievement of organization strategic objectives?
- A. B. C. D. E.	Is CIO performance measured by financial and nonfinancial data?
- A. B. C. D. E.	How complex is the IT infrastructure and how many applications are in use?
- A. B. C. D. E.	Are there standard IT hardware, software, and service procurement policies, procedures, and controls in place?

A.	Service Delivery and Measurement
B.	IT Organization and Risk Management
C.	Executive Leadership and Support
D.	Organizations and Governance Structures
E.	Strategic and Operational Planning