CISA Series Information Systems Operations Part 5A

Information Systems Operations is at the core of keeping technology reliable, secure, and aligned with business needs — and it’s a major focus area for both the CISA exam and real-world IT audit.

In Part 5A of the CISA Domain 4 series, we walk through the operational controls, processes, and audit considerations that help organisations manage day-to-day IT services effectively.

Topics covered include:

• Why Information Systems Operations matters
• Common technology components
• IT asset management
• Job scheduling and production process automation
• System interfaces and data transfers
• End-user computing risks and controls
• Data governance fundamentals
• Systems performance management
• Problem and incident management
• Change, configuration, release and patch management
• Service Level Management – SLA vs OLA
• Database management controls
• Audit scenarios by topic
• Key CISA exam focus points
• Modernised technology examples for today’s environments

These slides focuses on the practical side of operating and supporting IT services: monitoring, maintaining, controlling and improving day-to-day IT operations.

It also sets the foundation for Part 5B, where the focus shifts toward business resilience and continuity — preparing for disruptions, responding effectively, recovering services, and improving organisational resilience.

Transcript

1. CISA Series – Part 5A Domain 4 Information Systems Operations and Business Resilience Information Systems Operations Operating and Supporting IT Services Effectively
2. Why Information Systems Operations Matters Reliable operations support reliable business Controls protect availability and security Monitoring helps identify issues early Evidence confirms controls are working Stable operations reduce business disruption Operational discipline supports resilience Part A focuses on operate, monitor, control, improve Prepares for Part B: resilience, recovery, and continuity
21. Key Takeaway Ensuring day-to-day IT operations are reliable, controlled, secure, and aligned with business needs. Next in the series: CISA Domain 4 – Part 5B shifts from day-to-day operational reliability to organizational resilience when things go wrong. Prepare • Respond • Recover • Resume • Improve
22. Disclaimer Based on practical experience and interpretation Based on practical experience and interpretation Not affiliated with any organization Not affiliated with any organization • Like • Share • Subscribe • Follow the series Thank You Thank You