Book Image

CISA – Certified Information Systems Auditor Study Guide

By : Hemang Doshi
Book Image

CISA – Certified Information Systems Auditor Study Guide

By: Hemang Doshi

Overview of this book

Are you looking to prepare for the CISA exam and understand the roles and responsibilities of an information systems (IS) auditor? The CISA - Certified Information Systems Auditor Study Guide is here to help you get started with CISA exam prep. This book covers all the five CISA domains in detail to help you pass the exam. You’ll start by getting up and running with the practical aspects of an information systems audit. The book then shows you how to govern and manage IT, before getting you up to speed with acquiring information systems. As you progress, you’ll gain knowledge of information systems operations and understand how to maintain business resilience, which will help you tackle various real-world business problems. Finally, you’ll be able to assist your organization in effectively protecting and controlling information systems with IT audit standards. By the end of this CISA book, you'll not only have covered the essential concepts and techniques you need to know to pass the CISA certification exam but also have the ability to apply them in the real world.
Table of Contents (19 chapters)
1
Section 1: Information System Auditing Process
4
Section 2: Governance and Management of IT
7
Section 3: Information Systems Acquisition, Development, and Implementation
10
Section 4: Information System Operations and Business Resilience
13
Section 5: Protection of Information Assets

IT service level management

In this section, we will first have a look at IT service management practices, followed by a look at some assessment questions, the answers to which are given at the end of the chapter.

The following are some of the important aspects of service level management:

  • An SLA defines the nature, expectations, escalations, and other relevant information for the services being offered.
  • The SLA should be documented in non-technical terms and serve as the basis for measuring and monitoring services.
  • Service level management is the process of defining, documenting, and managing service requirements.
  • The following characteristics should be considered to define an SLA:
    • Accuracy
    • Completeness
    • Timeliness
    • Security
  • It is very important to monitor service levels at regular intervals to ensure that the objective of the service is achieved.
  • It must be noted that when service delivery is outsourced, the accountability of a service still rests with the service receiver.
  • It is...