CISA Series - System Acquisition and Development 4A

In this episode of the CISA Study Series, we explore the foundations of Information Systems Acquisition and Development and examine how organizations plan, acquire, design, develop, secure, and control information systems throughout the system development lifecycle.
These slides covers the key concepts, controls, methodologies, and audit considerations that every IS auditor should understand when evaluating system development projects. From project governance and feasibility studies to software development methodologies, DevOps, DevSecOps, software acquisition, configuration management, infrastructure development, control design, and data validation controls, this module provides a practical overview of how systems are built and governed.

Transcript

1. CISA Domain 3 – Part 4A Information Systems Acquisition, Development Building the Right System the Right Way A structured approach to governing, acquiring, developing, securing, and controlling information systems throughout the development lifecycle.
23. Key Takeaway Part 4A focuses on building systems correctly. The primary objective is ensuring that information systems are acquired, designed, developed, and controlled in a manner that delivers business value while managing risk, maintaining data integrity, and embedding appropriate controls from the outset. Next in the Series –Part 4B: Information Systems Implementation In the next part of the series, we'll move from building systems to implementing systems successfully and securely.
24. Disclaimer Based on practical experience and interpretation Not affiliated with any organization Thank You • Like • Share • Subscribe • Follow the series