When a business unit selects a new application without consulting IT, what is the PRIMARY risk?

Prepare for the CISA Domain 2 Exam. Use flashcards and multiple-choice questions with hints and explanations to get exam ready!

The primary risk associated with a business unit selecting a new application without consulting IT is that the application technology may be inconsistent with the enterprise architecture.

Enterprise architecture defines a framework for how information and technology are organized and managed across the organization. When applications are selected in isolation, there is a significant risk that the application will not align with the existing systems, platforms, and standards that are part of the enterprise architecture. This misalignment can lead to integration challenges, data silos, and increased complexity within the IT environment, which can ultimately inhibit the organization’s ability to operate efficiently and effectively.

Additionally, without IT's involvement, there is a greater chance that the selected application may not support the overall strategic goals of the organization, resulting in wasted resources and reduced return on investment. The implications of selecting an application that does not fit within the established architecture can also extend to increased costs for future integration efforts or system modifications, as well as potential disruptions to existing processes and workflows.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy