The correct answer is C. Reviewing escalated project issues.
A steering committee provides governance, oversight, prioritization, funding direction, issue escalation, and decision-making support for major initiatives. In a digital transformation program, the steering committee is most likely to review escalated project issues, resolve conflicts, approve major decisions, and ensure the program remains aligned with business objectives.
ISACA guidance on digital transformation governance highlights the importance of project governance frameworks, steering committees, and escalation paths. ISACA also describes executive steering committees as bodies that guide strategy, approve funding, make formal risk decisions, and support clear escalation paths and decision-making protocols.
Option A is not correct because designing interface controls is a technical/system design responsibility.
Option B is usually performed by business analysts, process owners, and project teams. Option D is usually prepared by the project manager or program manager, although the steering committee may review the status reports.
This question maps to Governance and Management of IT, because steering committees are part of IT governance, strategic oversight, resource allocation, and project/program governance.
References: ISACA CISA Exam Content Outline, Domain 2; ISACA guidance on project governance, steering committees, and escalation paths.

The impact if corrective actions are not taken is the most important factor to consider when scheduling follow- up audits. An IS auditor should prioritize the follow-up audits based on the risk and potential consequences of not addressing the audit findings and recommendations. The other options are less important factors that may affect the timing and scope of the follow-up audits, but not their necessity or urgency. References:
CISA Review Manual(Digital Version), Chapter 2, Section 2.5.31
CISA Review Questions, Answers and Explanations Database, Question ID 207

Open-source solutions provide flexibility and reduce vendor lock-in, allowing organizations to modify, enhance, and support software independently.
Option A (Incorrect):Open-source software often lacksformalizedsupport levels compared to proprietary solutions, which provide structured SLAs (Service Level Agreements).
Option B (Incorrect):While some open-source solutions are user-friendly, implementation complexity depends on the software and required customization.
Option C (Correct):A key benefit of open-source solutions is thefreedom from vendor dependence.
Organizations can customize the software, hire independent developers, or switch providers without being locked into a specific vendor ' s ecosystem.
Option D (Incorrect):Security in open-source software depends on the community and organization managing the solution. Some open-source tools have excellent security, while others may require additional hardening.
Reference:ISACA CISA Review Manual -Domain 4: Information Systems Operations and Business Resilience- Covers software licensing, vendor dependency, and support considerations.