CISA Domain 4 · Information Systems Operations and Business Resilience

Exam

CISA

Exam weight

26%

What it covers

IT components and assets, scheduling, interfaces, end-user computing, capacity, incident and problem management, change and patch management, logs, service levels, databases, BIA, resilience, backups, BCP and DRP.

What the exam rewards

Change management tested from actual changes
Root cause over repeated fixes
Recovery objectives set by the business
Backups proven by restores

Common traps

Treating redundancy as a backup
Letting IT set RTOs
Accepting backup logs as proof of recoverability

Official subtopics

Information Systems Operations

IT Components
IT Asset Management
Job Scheduling and Production Process Automation
System Interfaces
Shadow IT and End-User Computing
Systems Availability and Capacity Management
Problem and Incident Management
IT Change, Configuration, and Patch Management
Operational Log Management
IT Service Level Management
Database Management

Business Resilience

Business Impact Analysis
System and Operational Resilience
Data Backup, Storage, and Restoration
Business Continuity Plan
Disaster Recovery Plans

How to study it

This is a quarter of the exam. Drill RTO, RPO and MTD, backup types and recovery sites until you can reason through any scenario.