CISA: Certified Information Systems Auditor

Information security governance requires clearly defined organizational roles and responsibilities so that security-related decisions, controls, implementation, monitoring, and accountability have designated owners. If these responsibilities are absent, the organization may be unable to establish or enforce an effective information security program.