CISA resource for cisa examination. Domain 2 IT governance
Wannachinchaipong
36 views
10 slides
Jun 15, 2024
Slide 1 of 10
1
2
3
4
5
6
7
8
9
10
About This Presentation
this is cisa resource for it auditor who wanna try cisa exam certificate. it governance domain 2
Size: 917.75 KB
Language: en
Added: Jun 15, 2024
Slides: 10 pages
Slide Content
DOMAIN 2 IT Governance Introduction
The board of directors is responsible for the governance of the enterprise. The purpose of corporate governance is to help build an environment of trust, transparency and accountability necessary for fostering long-term investment, financial stability and business integrity , thereby supporting stronger growth and more inclusive societies Enterprise Governance The Components of an Enterprise Governance Framework .
Governance Objective The ultimate purpose of IT governance is to encourage optimal use of IT The governance is intended to specify the combination of decision rights and accountability that is best for the enterprise. It is different for every enterprise.
Holistic perspective of Enterprise and IT Governance
Goal Cascade Overview
ISACA’s COBIT framework, which was developed to help enterprises optimize the value of information assets, makes a clear distinction between governance and management. Governance —Ensures that stakeholder needs, conditions and options are evaluated to determine balanced, agreed-on enterprise objectives; direction is set through prioritization and decision-making; and performance and compliance are monitored against agreed-on direction and objectives Management —Plans, builds, runs and monitors activities in alignment with the direction set by the governance body to achieve the enterprise objectives Governance and Management.
The Evolution of Cobit
ENTERPRISE GOVERNANCE OF INFORMATION AND TECHNOLOGY The purpose of EGIT is to direct IT endeavors to ensure that IT aligns with and supports the enterprise’s objectives and its realization of promised benefits. Additionally, IT should enable the enterprise by exploiting opportunities and maximizing benefits. IT resources should be used responsibly, and IT-related risk should be managed appropriately.