IT governance frameworks and management practice concepts tested on the CISA exam.
35 cards · basic cards · AI-written, checked twice. Edit anything.
- What is the primary purpose of IT governance?
Show answer
To align IT strategy with business objectives and ensure effective use of IT resources to support organizational goals.- What does COBIT stand for?
Show answer
Control Objectives for Information and Related Technologies.- Name the primary process domains in COBIT.
Show answer
Governance, Strategy, Planning, Build, Acquire, Implement, Deliver/Service/Support, Monitor/Evaluate.- What does ITIL focus on?
Show answer
Service delivery and support; best practices for managing IT services to meet business needs.- What is the goal of ISO/IEC 27001?
Show answer
To establish a framework for information security management and protect confidentiality, integrity, and availability of information.- Define risk management.
Show answer
The process of identifying, analyzing, and responding to risks that could impact business objectives.- What are the key steps in a risk assessment?
Show answer
Identify risks, analyze likelihood and impact, prioritize, and determine risk tolerance.- What is risk mitigation?
Show answer
Actions taken to reduce the probability or impact of a risk to an acceptable level.- Name four common risk mitigation strategies.
Show answer
Avoid (eliminate the risk), reduce (lower impact or likelihood), transfer (shift to third party), accept (tolerate the risk).- What is a corrective control?
Show answer
A control designed to remediate or fix errors and issues that have been detected.- Define segregation of duties.
Show answer
The division of a critical transaction or process among multiple people to prevent fraud and errors.- What is the principle of least privilege?
Show answer
Users and systems should have only the minimum access rights necessary to perform their assigned tasks.- What is need to know?
Show answer
A principle stating that individuals should only have access to information required to perform their specific job function.- What is the purpose of change management?
Show answer
To control modifications to IT systems and infrastructure while minimizing risk and ensuring business continuity.- Name the typical phases of a change management process.
Show answer
Request, assessment, approval, implementation, testing, and documentation.
FlashKeepers