CISA: Certified Information Systems Auditor

Internal audit provides independent assurance by evaluating and validating the effectiveness of enterprise risk management (ERM). Establishing and operating the risk-management framework, as well as defining risk appetite, are management responsibilities.