Managing projects as a portfolio allows an organization to oversee and coordinate multiple projects collectively. This approach provides a holistic view, enabling the identification of interdependencies among projects. Recognizing these dependencies is crucial for resource allocation, scheduling, and achieving strategic objectives. While informing users, managing quality, and addressing individual project risks are important, they are typically handled within the scope of each project. The unique advantage of portfolio management lies in its ability to identify and manage relationships and dependencies across multiple projects, ensuring that the portfolio aligns with the organization's strategic goals.
References:
* ISACA CISA Review Manual, 28th Edition, Chapter 3: Information Systems Acquisition, Development, and Implementation.

The most effective method for detecting the presence of an unauthorized wireless access point on an internal network is A. Continuous network monitoring. This is because continuous network monitoring can capture and analyze all the wireless traffic in the network and identify any rogue or spoofed devices that may be connected to the network without authorization. Continuous network monitoring can also alert the system administrator of any suspicious or anomalous activities on the network and help to locate and remove the unauthorized wireless access point quickly.
Periodic network vulnerability assessments (B) can also help to detect unauthorized wireless access points, but they are not as effective as continuous network monitoring, because they are performed at fixed intervals and may miss some devices that are added or removed between the assessments. Review of electronic access logs © can provide some information about the devices that access the network, but they may not be able to detect devices that use fake or stolen credentials or devices that do not generate any logs. Physical security reviews (D) can help to prevent unauthorized physical access to the network ports or devices, but they may not be able to detect wireless access points that are hidden or disguised as legitimate devices.

The best reason for an IS auditor to emphasize to management the importance of using an IT governance framework is that frameworks can be tailored and optimized for different organizations. An IT governance framework is a set of principles, guidelines, and processes that help an organization align its IT strategy with its business goals, manage IT risks and performance, and deliver value from IT investments. An IT governance framework can be adapted and customized to suit the specific needs, context, and culture of each organization, taking into account factors such as size, industry, maturity, objectives, and stakeholders. An IT governance framework can also help an organization adopt best practices and standards from various sources, such as COBIT2, ITIL3, ISO/IEC 200004, and others.
The other options are not as good as option B, as they may not capture the full scope or benefits of using an IT governance framework. Frameworks enable IT benchmarks against competitors, but this is not the main purpose or advantage of using an IT governance framework. Frameworks help facilitate control self-assessments (CSAs), but this is only one aspect or tool of an IT governance framework. Frameworks help organizations understand and manage IT risk, but this is also only one outcome or objective of an IT governance framework.
References:
* 1: What is ITIL? Your guide to the IT Infrastructure Library | CIO
* 2: IT Governance Framework | Components | Framework | Terminology - EDUCBA
* 3: IT Governance: Definitions, Frameworks and Planning - ProjectManager
* 4: What Is IT Governance? - Definition from Techopedia
* 5: What is IT Governance? A formal way to align IT & business strategy | CIO
* 6: What Is IT Governance? - Definition from WhatIs.com
* 7: ISO/IEC 20000 Information Technology Service Management Systems Standard - ISO/IEC 20000 Portal
* 8: COBIT | Control Objectives for Information Technologies | ISACA