Reader small image

You're reading from  CISA – Certified Information Systems Auditor Study Guide - Second Edition

Product typeBook
Published inJun 2023
PublisherPackt
ISBN-139781803248158
Edition2nd Edition
Right arrow
Author (1)
Hemang Doshi
Hemang Doshi
author image
Hemang Doshi

Hemang Doshi has more than 15 years of experience in the field of system audit, IT risk and compliance, internal audit, risk management, information security audit, third-party risk management, and operational risk management. He has authored several books for certification such as CISA, CRISC, CISM, DISA, and enterprise risk management.
Read more about Hemang Doshi

Right arrow

IT Performance Monitoring and Reporting

One of the important elements of IT governance is the monitoring of IT performance. The knowledge that IT operations are moving in the desired direction provides management with a level of comfort. It is extremely important to develop metrics for monitoring performance. The following sections explain these metrics.

Development of Performance Metrics

Developing performance metrics usually involves three steps:

Figure 4.3: Steps for developing performance metrics

Figure 4.3: Steps for developing performance metrics

  1. Identify the critical processes: The first step is to identify the critical processes that need to be monitored.
  2. Identify the expected output: The second step is to define the expected output or target for each process that needs to be monitored.
  3. Compare the actual output with the target: On a periodic basis, compare the actual output with the target. If the target is not achieved, conduct a root cause analysis to determine areas of improvement...
lock icon
The rest of the page is locked
Previous PageNext Page
You have been reading a chapter from
CISA – Certified Information Systems Auditor Study Guide - Second Edition
Published in: Jun 2023Publisher: PacktISBN-13: 9781803248158

Author (1)

author image
Hemang Doshi

Hemang Doshi has more than 15 years of experience in the field of system audit, IT risk and compliance, internal audit, risk management, information security audit, third-party risk management, and operational risk management. He has authored several books for certification such as CISA, CRISC, CISM, DISA, and enterprise risk management.
Read more about Hemang Doshi