CISA Certified Information Systems Auditor Study Guide

Chapter 3IT Life Cycle Management

THE CERTIFIED INFORMATION SYSTEMS AUDITOR (CISA) OBJECTIVES REPRESENT 12% OF THE MATERIAL COVERED ON THE EXAM AND INCLUDE:

• Domain 3: Information Systems Acquisition, Development, & Implementation

• A. Information Systems Acquisition and Development
  • 1. Project Governance and Management
  • 2. Business Case and Feasibility Analysis
  • 3. System Development Methodologies
  • 4. Control Identification and Design
• B. Information Systems Implementation
  • 1. Testing Methodologies
  • 2. Configuration and Release Management
  • 3. System Migration, Infrastructure Deployment and Data Conversion
  • 4. Post-implementation Review
• Supporting Tasks
  • 9. Evaluate IT resource and portfolio management for alignment with the organization’s strategies and objectives.
  • 16. Evaluate the organization’s project management policies and practices.
  • 17. Evaluate controls at all stages of the information systems development lifecycle.
  • 18. Evaluate the readiness of information systems for implementation and migration into production.
  • 19. Conduct post-implementation review of systems to determine whether project deliverables, controls and requirements are met.

The topics in this chapter represent 12 percent of the CISA examination.

Organizations employ business processes to organize the tasks related to the development and maintenance of application software and the supporting IT infrastructure. Business processes provide constraint and management control for high-value activities ...