The primary purpose of IT capacity management is to ensure that IT infrastructure can meet current and future performance requirements in a cost-effective manner.
Option A is correct because it directly relates to capacity management goals.
Option B (rapid deployment) relates more to change management.
Option C (security concerns) is outside the scope of capacity management.
Option D (reducing cost/time) may be a secondary benefit but not the primary objective.

The best source of information for an IS auditor when reviewing an organization's IT infrastructure and operations is the Enterprise Architecture (EA). EA provides a comprehensive, high-level view of the organization's IT systems, their interconnections, and how they align with business processes and goals. It enables the auditor to understand the structure, components, and relationships within the IT infrastructure, which is crucial for assessing risks, controls, and compliance.

A DLP policy's primary purpose is to establish the criteria (rules) that determine what constitutes sensitive information and specify how that data should be monitored, handled, or blocked. This policy framework drives all detection and protection actions within the DLP solution.