CISA Cert Prep: 2 Information Technology Governance and Management for IS Auditors

Introduction

• Welcome

1. Governance

• IT governance

2. Enterprise architecture

• Enterprise architecture
• Policies
• Auditing governance and documentation

3. Risk Management

• Risk management process
• Planning
• Collect information: Part 1
• Collect information: Part 2
• Dealing with risk
• Auditing risk management

4. IT Management, Structure, and Responsibilities

• IT organization
• Auditing management structure

5. Business Continuity and Disaster Recovery

• Introduction
• BCP step-by-step
• Business impact analysis
• Recovery strategies and solutions
• Developing and implementing the plan
• Testing, training, and maintenance
• Auditing business continuity and disaster recovery

6. Maturity Models

• Maturity models

Conclusion

• Next steps