CISA: Certified Information Systems Auditor

Recent third-party IS audit reports provide independent, objective, and current evidence about the design and operating effectiveness of governance-related controls. Capability self-assessments and internal audit reports may be subject to management influence, while competitor benchmarking does not directly demonstrate whether the target organization’s governance controls operate effectively.