CRISC - Certified in Risk and Information Systems Control term definition - Part 53

The specific information subject to an IS auditor’s report and related procedures, which can include things such as the design or operation of internal controls and compliance with privacy practices or standards or specified laws and regulations (area of activity).

Obtaining audit evidence on the completeness, accuracy or existence of activities or transactions during the audit period.

Audit evidence is sufficient if it is adequate, convincing and would lead another IS auditor to form the same conclusions.

A concept that allows an enterprise to more effectively and efficiently manage the activities of design, manufacturing, distribution, service and recycling of products and service its customers.

Filters out electrical surges and spikes.

A computer file used to maintain information (transactions, payments or other events) until the proper disposition of that information can be determined.

Typically associated as a data link layer device, switches enable local area network (LAN) segments to be created and interconnected, which has the added benefit of reducing collision domains in Ethernet-based networks.

System in which a different key (or set of keys) is used by each pair of trading partners to ensure that no one else can read their messages. The same key is used for encryption and decryption. See also Private Key Cryptosystem.

A flag set in the initial setup packets to indicate that the communicating parties are synchronizing the sequence numbers used for the data transmission.

Block-at-a-time data transmission.

The phases deployed in the development or acquisition of a software system.

Special system software features and utilities that allow the user to perform complex system maintenance.

Graphic representations of the sequence of operations in an information system or program

Provides an overview explanation of system flowcharts, with explanation of key control points and system interfaces.

A collection of computer programs used in the design, processing and control of all applications.

Testing conducted on a complete, integrated system to evaluate the system's compliance with its specified requirements.

Procedures established to purchase application software, or an upgrade, including evaluation of the supplier's financial stability, track record, resources and references from existing customers.

The systems development phase in which systems specifications and conceptual designs are developed based on end-user needs and requirements.

Structured information on all IT services available to customers. COBIT 5 perspective

The learned capacity to achieve pre-determined results