CISA Domain 3 · Information Systems Acquisition, Development and Implementation
- Domain
- CISA Domain 3 · Information Systems Acquisition, Development and Implementation
- Exam
- CISA
- Exam weight
- 12%
- What it covers
Project governance, business cases, development methodologies, control design, testing, release management, migration and post-implementation review.
- What the exam rewards
- Controls designed in early
- Business sign-off on acceptance
- Controlled releases and conversions
- Benefits checked after go-live
- Common traps
- Auditor taking a decision role in the project
- Developers approving their own testing
- Skipping reconciliation in data conversion
- Official subtopics
Information Systems Acquisition and Development
- Project Governance and Management
- Business Case and Feasibility Analysis
- System Development Methodologies
- Control Identification and Design
Information Systems Implementation
- System Readiness and Implementation Testing
- Implementation Configuration and Release Management
- System Migration, Infrastructure Deployment, and Data Conversion
- Post-implementation Review
- How to study it
Memorize the testing levels in order and the changeover approaches, then focus on who approves what.