アプリケーションと IT システムによってサポートされている組織のビジネス プロセスを評価する際に、IS 監査人がレビューするのに最も役立つのは次のうちどれですか?
正解:A
Configuration Management Database (CMDB) is a repository of information about an organization's IT infrastructure, including hardware and software components, the relationships between them, and the people and processes associated with them. By reviewing the CMDB, an IS auditor can gain insight into the organization's IT systems and applications and evaluate their effectiveness in supporting the organization's business processes. Additionally, the CMDB can be used to identify any potential security vulnerabilities or areas of improvement.