CISA Certified Information Systems Auditor All-in-One Exam Guide, Fourth Edition, 4th Edition

CHAPTER 4

IT Life Cycle Management

This chapter covers CISA Domain 3, “Information Systems Acquisition, Development, and Implementation,” and discusses the following topics:

•   Program and project management

•   The systems development life cycle (SDLC)

•   Infrastructure development and implementation

•   Maintaining information systems

•   Business processes and business process reengineering

•   Managing third-party risk

•   Application controls

•   Auditing the software development life cycle

•   Auditing business and application controls

•   Auditing third parties

The topics in this chapter represent 12 percent of the CISA examination.

Organizations employ business processes to organize the tasks related to the development and maintenance ...