What Creates the Greatest Business-IT Alignment Challenge?

CISA By islever Editorial Last updated Sep 8, 2026

Short answer

D Securing CIO attendance at board meetings to align IT strategy with enterprise objectives and eliminate executive disconnect.

Question

Which of the following presents the GREATEST challenge to the alignment of business and IT?

Lack of information security involvement in business strategy development
An IT steering committee chaired by the chief information officer (CIO)
Insufficient IT budget to execute new business projects
Lack of chief information officer (CIO) involvement in board meetings Correct Answer

Key Takeaways

Tests understanding of executive sponsorship in IT governance, where candidates often mistakenly prioritize tactical security or budget issues over strategic leadership involvement.

Achieving business-IT alignment requires executive-level strategic integration, with community consensus confirming that excluding the CIO from board decisions creates the greatest misalignment.

Common mistake: Option A is frequently chosen because security is critical, but it addresses a functional sub-domain rather than the overarching strategic partnership required between business leadership and IT.

Expert Analysis

Why the Answer Is Correct

Strategic alignment between business and IT fundamentally depends on executive sponsorship and shared decision-making authority. When the CIO is excluded from board meetings, IT loses its voice in shaping corporate strategy, reducing it to a reactive support function rather than a strategic enabler. ISACA frameworks consistently emphasize that board-level participation is the primary mechanism for ensuring technology investments directly support enterprise objectives.

Why the Other Options Are Wrong

Option A focuses on information security, which is a vital operational concern but represents a functional subset rather than the overarching strategic partnership needed for full alignment. Option B describes an IT steering committee chaired by the CIO, which is actually a recognized best practice that actively promotes alignment through structured governance. Option C highlights budget constraints, which create operational friction but do not inherently break the strategic relationship between business leadership and IT executives.

Community Comment Notes

The voting split reflects common candidate hesitation between tactical security concerns and strategic leadership gaps. Comment [1] correctly notes that the question targets broad IT governance rather than isolated security functions. Comment [3] acknowledges contextual dependencies but overlooks that certification exams prioritize standardized governance hierarchies over situational variables. Comment [5] accurately identifies the CIO’s bridging role and validates why board exclusion remains the most severe structural barrier to alignment.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

Focus on strategic versus tactical distinctions when answering governance questions; always prioritize options that elevate IT decision-making to the highest executive level.

Frequently Asked Questions

Why is option A (security involvement) not the greatest alignment challenge?

Information security is a functional subset of IT strategy, whereas board-level CIO participation dictates overarching business-IT alignment.

Does an IT steering committee chaired by the CIO help alignment?

Yes, it is a recognized best practice that facilitates cross-functional coordination and ensures IT initiatives match business priorities.

More CISA FAQ →

Community Votes

60%

40%

60% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 5 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 5

topikal 👍 2 Answered D

the question asks about IT not just information security , I vote D
KAP2HURUF 👍 1 Answered A

Therefore, ensuring InfoSec is involved from the beginning of business strategy development is crucial for achieving strong alignment between business goals and IT solutions. This collaborative approach helps create a secure foundation for successful business initiatives.
1Naa 👍 1 Answered A

If information security is excluded from business strategy development, the organization risks implementing IT solutions that do not adequately address security concerns, compliance requirements, or risk management, leading to misalignment. so A
Sibsankar 👍 1

The most significant challenge depends on the specific context of the organization. If security is a major concern, then A might be most critical. If communication and collaboration are lacking, then D is the biggest obstacle.
MJORGER 👍 1 Answered D

The CIO plays a crucial role in bridging the gap between business and IT. If the CIO is not involved in board meetings, it could lead to a disconnect between the business strategy and the IT strategy.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Practice All CISA Questions

Access 400 questions with complete answers and detailed explanations.

View Full CISA Practice Test →

← Back to CISA Study Guide