Domain 4 Task Statements

Question 1

Domain 4—IS Operations, Maintenance, and Service Management (20%)

Answer 1

Provide assurance that the processes for information systems operations, maintenance and service management meet the organization’s strategies and objectives.

Question 2

T4.1

Answer 2

Evaluate IT service management framework and practices (internal or third party) to determine whether the controls and service levels expected by the organization are being adhered to and whether strategic objectives are met.

Question 3

T4.2

Answer 3

Conduct periodic reviews of information systems to determine whether they continue to meet the organization’s objectives within the enterprise architecture (EA).

Question 4

T4.3

Answer 4

Evaluate IT operations (e.g., job scheduling, configuration management, capacity and performance management) to determine whether they are controlled effectively and continue to support the organization’s objectives.

Question 5

T4.4

Answer 5

Evaluate IT maintenance (patches, upgrades) to determine whether they are controlled effectively and continue to support the organization’s objectives.

Question 6

T4.5

Answer 6

Evaluate database management practices to determine the integrity and optimization of databases.

Question 7

T4.6

Answer 7

Evaluate data quality and life cycle management to determine whether they continue to meet strategic
objectives.

Question 8

T4.7

Answer 8

Evaluate problem and incident management practices to determine whether problems and incidents are
prevented, detected, analyzed, reported and resolved in a timely manner to support organization ́s
objectives.

Question 9

T4.8

Answer 9

Evaluate change and release management practices to determine whether changes made to systems
and applications are adequately controlled and documented.

Question 10

T4.9

Answer 10

Evaluate end‐user computing to determine whether the processes for end‐user computing are effectively controlled and support the organization’s objectives.

Question 11

T4.10

Answer 11

Evaluate IT continuity and resilience (backups/restores, disaster recovery plan [DRP]) to determine. Provide assurance that the processes for information systems operations, maintenance and service management meet the organization’s strategies and objectives whether it is controlled effectively and continues to support the organization’s objectives.