The correct answer is D. Create an interdisciplinary IT steering committee to oversee IT prioritization and spending.

The issue is not just poor documentation; it is weak IT governance. Projects are being managed informally and separately by isolated project managers. This indicates a lack of centralized prioritization, oversight, accountability, and alignment with business objectives. An interdisciplinary IT steering committee would help ensure that IT initiatives are reviewed, prioritized, funded, monitored, and aligned with enterprise strategy.

ISACA’s glossary defines an IT steering committee as an executive-management-level committee that assists in delivering IT strategy, oversees day-to-day management of IT service delivery and IT projects, and focuses on implementation aspects. This directly addresses the problem described in the question.

Option A is too extreme. Stopping all projects could harm the organization and is not a mature governance response unless there is an immediate critical risk. Option B is weak because a follow-up audit only checks later whether improvement occurred; it does not create governance now. Option C may improve documentation, but a project management tool alone does not establish governance, prioritization, or business accountability.

This question maps to Governance and Management of IT because the concern is IT governance maturity, project oversight, prioritization, and spending. ISACA’s CISA Exam Content Outline includes organizational structure, IT governance, IT strategy, IT resource management, and evaluation of IT project management alignment with organizational objectives.