CPA Exam Lab
Section 1: 35–45%I1

IT Governance and the IT Function

Exam Insight

IT governance is where ISC begins because every control downstream depends on a properly structured, well-supervised IT function. The AICPA tests whether you can spot the segregation-of-duties failures and governance gaps that let a single person both write and run production code.

CPA Exam Lab is an independent study resource and is not affiliated with, endorsed by, or sponsored by the AICPA® or NASBA. Practice questions are original content created for study purposes. “CPA” is a registered trademark of the AICPA.

What AICPA Wants You to Know

  • 1Explain how IT governance aligns IT strategy with overall business strategy and objectives.
  • 2Describe the role of the IT steering committee and key IT governance frameworks such as COBIT.
  • 3Identify the responsibilities of core IT roles and how they should be separated.
  • 4Apply segregation-of-duties principles to keep systems development, operations, and security distinct.
  • 5Evaluate governance risks introduced by cloud computing and outsourcing arrangements.