CISA Certified Information Systems Auditor Study Guide

Appendix APopular Methodologies, Frameworks, and Guidance

Are you getting ready to develop, document, or audit IT controls? Several methodologies, frameworks, and guides contain detailed information on processes, control objectives, and controls that may assist you in your efforts. This appendix is dedicated to helping you make sense of these available resources and the terminology used within each of them.

The appendix is divided into two main sections. The first section focuses on common terms and concepts, whereas the second section describes the various methodologies, frameworks, and guides available and provides background information, high points, and a summary of why the resource may be helpful to a CISA-certified professional.

If you are reading this for the first time, it is recommended that you pay close attention to the first section, “Common Terms and Concepts,” which provides you with a foundation from which to view the resources. Once familiar with the terminology, you can skip to the second section, “Frameworks, Methodologies, and Guidance,” and find the resources that most directly apply to you and your organization’s objectives. A table appears at the end of the appendix to guide you as to which frameworks may be most relevant to you.

Exam Tip

You will not be tested on details of the various frameworks discussed in the second section of this appendix. This appendix provides the aspiring and professional IS auditor with additional tools and techniques that ...