ITAF

Name

ITAF

Publisher

ISACA

Type

Audit standard

What it is

ISACA's IT Assurance Framework: the standards, guidelines and techniques for IS audit and assurance work. Its standards cover planning, risk assessment, evidence, using the work of experts, irregularities and illegal acts, reporting and follow-up. The 5th edition was released in February 2026.

Key points

• General standards: independence, objectivity, due care, proficiency
• Performance standards: planning, risk assessment, evidence, using others' work, irregularities
• Reporting standards: reporting and follow-up

On the exam

Underpins CISA Domain 1. Questions about independence, evidence, reporting and follow-up come from here.

More from Standards & Frameworks