CISA Certified Information Systems Auditor Study Guide

Chapter 1IT Governance and Management

THE CERTIFIED INFORMATION SYSTEMS AUDITOR (CISA) OBJECTIVES REPRESENT 18% OF THE MATERIAL COVERED ON THE EXAM AND INCLUDE:

• Domain 2: Governance & Management of IT

• A. IT Governance
  • 1. IT Governance and IT Strategy
  • 2. IT-Related Frameworks
  • 3. IT Standards, Policies, and Procedures
  • 4. Organizational Structure
  • 5. Enterprise Architecture
  • 6. Enterprise Risk Management
  • 7. Maturity Models
  • 8. Organization
• B. IT Management
  • 1. IT Resource Management
  • 2. IT Service Provider Acquisition and Management
  • 3. IT Performance Monitoring and Reporting
  • 4. Quality Assurance and Quality Management of IT
• Supporting Tasks
  • 5. Evaluate the IT strategy for alignment with the organization’s strategies and objectives.
  • 6. Evaluate the effectiveness of IT governance structure and IT organizational structure.
  • 7. Evaluate the organization’s management of IT policies and practices.
  • 8. Evaluate the organization’s IT policies and practices for compliance with regulatory and legal requirements.
  • 10. Evaluate the organization’s risk management policies and practices.
  • 15. Evaluate whether IT supplier selection and contract management processes align with business requirements.
  • 22. Evaluate IT operations to determine whether they are controlled effectively and continue to support the organization’s objectives.
  • 37. Provide consulting services and guidance to the organization in order to improve the quality and control of information systems.

IT governance should ...