Isaca Exam CISA Topic 3 Question 67 Discussion

A top-down approach to the development of IT policies typically involves setting goals at the top and then developing policies to meet those goals. This type of approach results in greater consistency across the organization, as all policies are developed in alignment with the overall goals. Additionally, this approach may result in greater adherence to best practices, as the policies are developed with the organization's long-term goals in mind. It may also result in a synthesis of existing operational policies, as the goals set at the top are used to develop a unified IT policy. Finally, it may also result in a more comprehensive risk assessment plan, as all policies must be evaluated for their potential risks to the organization.