ISACA CGEIT: key terms

Flashcards for this exam ISACA CGEIT guide Class dates

• AssuranceObjective examination of evidence to provide an independent assessment of governance, risk, and control.Intermediate
• Audit CharterFormal document defining internal audit's purpose, authority, responsibility, and accountability.Foundational
• Audit CommitteeBoard committee of independent directors overseeing financial reporting, internal control, and audit functions.Foundational
• Balanced Scorecard (BSC)Performance management tool measuring strategy across financial, customer, internal process, and learning and growth perspectives.Intermediate
• Business CaseDocumented justification for an investment, describing benefits, costs, risks, and alignment with objectives.Intermediate
• Capability Maturity Model Integration (CMMI)Process improvement model defining maturity and capability levels from initial to optimizing.Intermediate
• COBITISACA framework for governance and management of enterprise information and technology.Intermediate
• COBIT Design FactorsEleven factors in COBIT 2019 that influence how an enterprise tailors its governance system.Advanced
• COBIT Management DomainsFour COBIT management domains: Align, Plan and Organize; Build, Acquire and Implement; Deliver, Service and Support; Monitor, Evaluate and Assess.Intermediate
• Control EnvironmentThe set of standards, processes, and structures, including tone at the top, that provide the basis for internal control.Intermediate
• Corporate GovernanceThe system of rules, practices, and processes by which a board directs and controls an organization on behalf of stakeholders.Foundational
• COSO ERM FrameworkCOSO's enterprise risk management framework integrating risk with strategy and performance.Advanced
• COSO Internal Control Integrated FrameworkWidely used framework for designing and evaluating internal controls, with five components and 17 principles.Intermediate
• Enterprise Governance of IT (EGIT)Governance of information and technology that ensures IT enables enterprise goals, optimizes risk and resources, and delivers value.Intermediate
• Enterprise Risk Management (ERM)Organization-wide approach to identifying, assessing, and managing all risks to achieve objectives.Intermediate
• Evaluate, Direct and Monitor (EDM)COBIT governance domain in which the governing body evaluates options, directs management, and monitors performance.Intermediate
• Goals CascadeCOBIT mechanism translating stakeholder needs into enterprise goals, alignment goals, and governance and management objectives.Advanced
• Information Security GovernanceThe leadership, structures, and processes that ensure security strategy supports business objectives and manages risk to an acceptable level.Foundational
• Internal AuditIndependent, objective assurance and consulting activity within an organization that evaluates governance, risk management, and control.Foundational
• Internal ControlProcess designed to provide reasonable assurance about achieving objectives in operations, reporting, and compliance.Foundational
• ISO/IEC 38500International standard providing principles for the governance of IT by boards and governing bodies.Advanced
• Key Goal Indicator (KGI)Metric that shows whether a business or IT goal has been achieved.Intermediate
• Key Performance Indicator (KPI)Metric that measures how well a process or activity is performing against targets.Foundational
• Key Risk Indicator (KRI)Metric that provides early warning of increasing risk exposure.Intermediate
• Maturity ModelStructured scale for measuring the capability and consistency of processes from ad hoc to optimized.Intermediate
• Post-Implementation Review (PIR)Review after a system or project goes live to assess whether objectives and benefits were achieved.Intermediate
• Risk AppetiteBroad amount and type of risk an organization is willing to pursue or retain to achieve its objectives.Foundational
• Risk ProfileSnapshot description of the overall set of risks an organization or unit faces at a point in time.Intermediate
• Security Steering CommitteeCross-functional management group that prioritizes security initiatives, resolves conflicts, and aligns security with business needs.Intermediate
• Strategic AlignmentEnsuring the information security strategy directly supports and enables business goals and objectives.Foundational
• Three Lines ModelIIA model describing governance roles: management (first and second lines), internal audit (third line), and the governing body.Intermediate
• TOGAFThe Open Group Architecture Framework, an enterprise architecture methodology centered on the Architecture Development Method.Advanced
• Value DeliveryGovernance outcome ensuring IT and security investments deliver the expected business benefits at optimal cost.Intermediate
• Zachman FrameworkEnterprise architecture ontology using a 6x6 matrix of perspectives and interrogatives.Advanced