CISA Certified Information Systems Auditor Study Guide

Chapter 5IT Infrastructure

THE CERTIFIED INFORMATION SYSTEMS AUDITOR (CISA) OBJECTIVES REPRESENT 26% OF THE MATERIAL COVERED ON THE EXAM AND INCLUDE:

• Domain 4: Information Systems Operations & Business Resilience

• A. Information Systems Operations
  • 1. Common Technology Components
  • 2. IT Asset Management
  • 3. Job Scheduling and Production Process Automation
  • 4. System Interfaces
  • 5. End-User Computing
• Supporting Tasks
  • 21. Conduct periodic review of information systems and enterprise architecture.
  • 23. Evaluate IT maintenance practices to determine whether they are controlled effectively and continue to support the organization’s objectives.
  • 28. Evaluate end-user computing to determine whether the processes are effectively controlled.
  • 32. Evaluate data classification practices for alignment with the organization’s policies and applicable external requirements.
  • 33. Evaluate policies and practices related to asset lifecycle management.

Together, the topics in Chapter 4, “IT Service Management,” Chapter 6, “Business Continuity and Disaster Recovery,” and this chapter represent 26 percent of the CISA examination.

In addition to being familiar with IT business processes, IS auditors need to have a keen understanding of the workings of computer hardware, operating systems, and network communications technology. This knowledge will help the auditor better understand many aspects of service management and operations.

Information Systems Hardware

Hardware is the elemental ...