An IS auditor was asked to review alignment between IT and business goas for a small financial institution. The IS auditor requested various information including business goals and objectives and IT goals and objectives. The IS auditor found that business goals and objectives were limited to a bulleted list, while IT goals and objectives were limited to slides used in meetings with the Chief Information Officer (Chief Information Officer reports to the Chief Finance Officer). It was also found in the documentation provided that over the past two years, the risk management committee only meet on three occasions, and no minutes of what was discussed were kept for these meetings. When the IT budget for the upcoming year was compared to the strategic plans for IT, it was noted that several of the initiatives mentioned in the plans for the upcoming year were not included in the budget for that year. Required: 1. Discuss the area that would be of greatest concern to the IS auditor in reviewing the area above. (5)